Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2006-0944

CVE-2006-0944—

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

23RISCO

abrir ↗

Referência

CVE-2013-2760

CVE-2013-2760—

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m

23RISCO

abrir ↗

Referência

CVE-2014-4944

CVE-2014-4944—

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress al

23RISCO

abrir ↗

Referência

CVE-2015-2554

CVE-2015-2554—

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10

23RISCO

abrir ↗

Referência

CVE-2015-8261

CVE-2015-8261—

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized

23RISCO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.13 - Remote File Inclusion

CVE-2007-5117—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailBee Objects 5.5 - 'MailBee.dll' Remote Insecure Method

CVE-2008-0631—remotewindows

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fast Click SQL 1.1.7 Lite - 'init.php' Remote File Inclusion

CVE-2008-4624—webappsphp

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creator CMS 5.0 - 'sideid' SQL Injection

CVE-2008-7001—webappsasp

Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-2257

CVE-2010-2257—

SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-2257

CVE-2010-2257—

SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to e

23RISCO

abrir ↗

Referência

b2evolution 6.11.6 - 'plugin name' Stored XSS

CVE-2020-22841—webappsphp

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution

23RISCO

abrir ↗

Referência

CVE-2022-30076

CVE-2022-30076MEDIUM

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames

33RISCO

abrir ↗

Referência✓ VexDay Proof

TFT Gallery 0.10 - Password Disclosure

CVE-2006-1412—webappsphp

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion

CVE-2006-7132—webappsphp

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2013-4948

CVE-2013-4948—

SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2013-4948

CVE-2013-4948—

SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Engine 2.0 - Multiple Local File Inclusions

CVE-2007-6581—webappsphp

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2018-25114

CVE-2018-25114CRITICAL

osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2018-25114

CVE-2018-25114CRITICAL

osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2012-3838

CVE-2012-3838—

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/b

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência

CVE-2020-22841

CVE-2020-22841—

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution

23RISCO

abrir ↗

Referência✓ VexDay Proof

SezHoo 0.1 - Remote File Inclusion

CVE-2008-4704—webappsphp

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1583—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Philips VOIP841 Firmware 1.0.4.800 - Multiple Vulnerabilities

CVE-2008-4874—remotehardware

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service

23RISCO

abrir ↗

Referência✓ VexDay Proof

Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion

CVE-2008-5066—webappsphp

PHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media ThemeSiteScript 1.0 allows r

23RISCO

abrir ↗

Referência

CVE-2010-0366

CVE-2010-0366—

Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Scri

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.