Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2012-6524

CVE-2012-6524—

SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Munch Pro 1.0 - 'switch.asp' SQL Injection

CVE-2006-5880—webappsasp

SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

UPublisher 1.0 - 'viewarticle.asp' SQL Injection

CVE-2006-5888—webappsasp

SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2006-7247

CVE-2006-7247—

SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remo

23RISCO

abrir ↗

Referência

CVE-2012-6525

CVE-2012-6525—

SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7116—webappsphp

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting

CVE-2019-9556—webappshardware

FiberHome an5506-04-f RP2669 devices have XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Homepage M 1.0 - 'galerie.php' SQL Injection

CVE-2007-5308—webappsphp

SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Unreal Tournament 3 1.3 - Directory Traversal

CVE-2008-4243—remotewindows

Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tourna

23RISCO

abrir ↗

Referência

CVE-2010-4808

CVE-2010-4808—

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p

23RISCO

abrir ↗

Referência

CVE-2012-4055

CVE-2012-4055—

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2012-2908

CVE-2012-2908—

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2012-2923

CVE-2012-2923—

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

CVE-2006-4210—webappsphp

nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to us

23RISCO

abrir ↗

Referência

CVE-2010-2744

CVE-2010-2744—

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection

CVE-2008-3185—webappsphp

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2012-5909

CVE-2012-5909—

SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-1294

CVE-2012-1294—

SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência

CVE-2012-1210

CVE-2012-1210—

SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2015-7077

CVE-2015-7077—

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RISCO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2011-5195

CVE-2011-5195—

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference

23RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2012-0905

CVE-2012-0905—

SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-2715

CVE-2009-2715—

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

CVE-2006-3851—webappsphp

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.