Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2014-10035

CVE-2014-10035—

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrat

23RISCO

abrir ↗

Referência

CVE-2014-10035

CVE-2014-10035—

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrat

23RISCO

abrir ↗

Referência

CVE-2012-4867

CVE-2012-4867—

Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2012-4867

CVE-2012-4867—

Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at

23RISCO

abrir ↗

Referência

CVE-2018-7543

CVE-2018-7543—

Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for

23RISCO

abrir ↗

Referência✓ VexDay Proof

XM Easy Personal FTP Server 1.0 - 'Port' Remote Overflow (PoC)

CVE-2006-2226—doswindows

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of serv

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre News Manager 1.0 - 'id' SQL Injection

CVE-2006-2763—webappsphp

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4026—webappsphp

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4607—webappsphp

admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpCMS 1.2.2 - 'file' Remote File Disclosure

CVE-2008-0513—webappsphp

Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component acctexp 0.12.x - Blind SQL Injection

CVE-2008-2632—webappsphp

SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2012-4335

CVE-2012-4335—

Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative siz

23RISCO

abrir ↗

Referência

CVE-2009-3322

CVE-2009-3322—

The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood o

23RISCO

abrir ↗

Referência

CVE-2014-9240

CVE-2014-9240—

SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2018-18772

CVE-2018-18772—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as dem

23RISCO

abrir ↗

Referência✓ VexDay Proof

saPHP Lesson 2.0 - 'forumid' SQL Injection

CVE-2005-3363—webappsphp

SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2018-0877

CVE-2018-0877—

The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server,

23RISCO

abrir ↗

Referência

CVE-2011-5173

CVE-2011-5173—

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2013-6882

CVE-2013-6882—

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earl

23RISCO

abrir ↗

Referência

CVE-2013-6882

CVE-2013-6882—

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earl

23RISCO

abrir ↗

Referência

CVE-2015-1722

CVE-2015-1722—

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S

23RISCO

abrir ↗

Referência

CVE-2015-1722

CVE-2015-1722—

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S

23RISCO

abrir ↗

Referência

CVE-2014-3840

CVE-2014-3840—

Multiple cross-site scripting (XSS) vulnerabilities in apps/common/templates/calculate_form_title.html in Mayan EDMS 0.1

23RISCO

abrir ↗

Referência

CVE-2010-2147

CVE-2010-2147—

Cross-site scripting (XSS) vulnerability in the My Car (com_mycar) component 1.0 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-6366

CVE-2017-6366—

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all

23RISCO

abrir ↗

Referência

CVE-2018-11628

CVE-2018-11628—

Data input into EMS Master Calendar before 8.0.0.201805210 via URL parameters is not properly sanitized, allowing malici

23RISCO

abrir ↗

Referência✓ VexDay Proof

mebiblio 0.4.7 - SQL Injection / Arbitrary File Upload / Cross-Site Scripting

CVE-2008-2646—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2019-11398

CVE-2019-11398—

Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2019-11398

CVE-2019-11398—

Multiple cross-site scripting (XSS) vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2010-1363

CVE-2010-1363—

SQL injection vulnerability in the JProjects (com_j-projects) component for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.