Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2017-15013

CVE-2017-15013—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

23RISCO

abrir ↗

Referência

CVE-2013-4861

CVE-2013-4861—

Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote

23RISCO

abrir ↗

Referência

CVE-2016-10081

CVE-2016-10081—

/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a cra

23RISCO

abrir ↗

Referência

CVE-2017-16787

CVE-2017-16787—

The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2017-0045

CVE-2017-0045—

Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse cr

23RISCO

abrir ↗

Referência

CVE-2015-2071

CVE-2015-2071—

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows r

23RISCO

abrir ↗

Referência

CVE-2015-2071

CVE-2015-2071—

Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows r

23RISCO

abrir ↗

Referência

CVE-2009-3436

CVE-2009-3436—

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2019-0285

CVE-2019-0285—

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive databas

23RISCO

abrir ↗

Referência✓ VexDay Proof

PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure

CVE-2007-2486—webappsasp

Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Links 1.3 - 'smarty.php' Remote File Inclusion

CVE-2008-0566—webappsphp

PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote a

28RISCO

abrir ↗

Referência✓ VexDay Proof

ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod

CVE-2008-4549—remotewindows

The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69,

23RISCO

abrir ↗

Referência✓ VexDay Proof

Free PHP VX Guestbook 1.06 - Arbitrary Database Backup

CVE-2008-7006—webappsphp

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a

23RISCO

abrir ↗

Referência

CVE-2017-7175

CVE-2017-7175—

NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt pa

23RISCO

abrir ↗

Referência

CVE-2015-4592

CVE-2015-4592—

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allow

23RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2016-8025

CVE-2016-8025—

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authen

23RISCO

abrir ↗

Referência

CVE-2008-7053

CVE-2008-7053—

LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash)

23RISCO

abrir ↗

Referência

CVE-2009-0886

CVE-2009-0886—

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2014-8770

CVE-2014-8770—

Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a an

23RISCO

abrir ↗

Referência

CVE-2013-5673

CVE-2013-5673—

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attack

23RISCO

abrir ↗

Referência

CVE-2013-5673

CVE-2013-5673—

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attack

23RISCO

abrir ↗

Referência

CVE-2009-4091

CVE-2009-4091—

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion

CVE-2009-0886—webappsphp

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlaP 1.0b - 'pachtofile' Remote File Inclusion

CVE-2007-2940—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

CVE-2007-6290—webappsphp

Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Maian Guestbook 3.2 - Insecure Cookie Handling

CVE-2008-3320—webappsphp

admin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass authentication and gain administrat

23RISCO

abrir ↗

Referência✓ VexDay Proof

Silentum LoginSys 1.0.0 - Insecure Cookie Handling

CVE-2008-6763—webappsphp

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.