Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.053exploits catalogados

34.675CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.758VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2010-1923

CVE-2010-1923—

SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remot

23RISCO

abrir ↗

Referência

CVE-2017-17575

CVE-2017-17575—

FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17575

CVE-2017-17575—

FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2013-0135

CVE-2013-0135—

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2017-17572

CVE-2017-17572—

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

23RISCO

abrir ↗

Referência

CVE-2017-17572

CVE-2017-17572—

FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.

23RISCO

abrir ↗

Referência

CVE-2017-17570

CVE-2017-17570—

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_o

23RISCO

abrir ↗

Referência

CVE-2017-17570

CVE-2017-17570—

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_o

23RISCO

abrir ↗

Referência

CVE-2017-17574

CVE-2017-17574—

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17574

CVE-2017-17574—

FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17581

CVE-2017-17581—

FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17577

CVE-2017-17577—

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param

23RISCO

abrir ↗

Referência

CVE-2017-17577

CVE-2017-17577—

FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param

23RISCO

abrir ↗

Referência

CVE-2021-31642

CVE-2021-31642—

A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including B

35RISCO

abrir ↗

Referência

CVE-2021-31674

CVE-2021-31674—

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke

23RISCO

abrir ↗

Referência

CVE-2021-31761

CVE-2021-31761—

Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's ru

35RISCO

abrir ↗

Referência

CVE-2021-32172

CVE-2021-32172—

Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the

50RISCO

abrir ↗

Referência

Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass

CVE-2021-3278—webappsmultiple

Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection

28RISCO

abrir ↗

Referência

CVE-2021-3291

CVE-2021-3291—

Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the mod

28RISCO

abrir ↗

Referência

CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS

CVE-2021-3294—webappsphp

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a co

23RISCO

abrir ↗

Referência

CVE-2010-1924

CVE-2010-1924—

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2018-5754

CVE-2018-5754—

Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and

23RISCO

abrir ↗

Referência

CVE-2018-5754

CVE-2018-5754—

Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and

23RISCO

abrir ↗

Referência

CVE-2019-6710

CVE-2019-6710—

Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CSRF.

23RISCO

abrir ↗

Referência

CVE-2018-12114

CVE-2018-12114—

Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts.

23RISCO

abrir ↗

Referência

CVE-2010-1925

CVE-2010-1925—

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-1925

CVE-2010-1925—

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2015-4630

CVE-2015-4630—

Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x

23RISCO

abrir ↗

Referência

CVE-2017-0282

CVE-2017-0282—

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RISCO

abrir ↗

Referência

CVE-2017-0285

CVE-2017-0285—

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.