Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2017-14848

CVE-2017-14848—

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.

23RISCO

abrir ↗

Referência

CVE-2009-2395

CVE-2009-2395—

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2009-3601

CVE-2009-3601—

Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject a

23RISCO

abrir ↗

Referência

CVE-2018-11415

CVE-2018-11415—

SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: th

23RISCO

abrir ↗

Referência

CVE-2004-1521

CVE-2004-1521—

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable

23RISCO

abrir ↗

Referência✓ VexDay Proof

Valdersoft Shopping Cart 3.0 - Remote Command Execution

CVE-2006-0099—webappsphp

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/temp

23RISCO

abrir ↗

Referência

CVE-2010-4781

CVE-2010-4781—

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1219

CVE-2010-1219—

Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read

38RISCO

abrir ↗

Referência

CVE-2010-4781

CVE-2010-4781—

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2007-0122

CVE-2007-0122—

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated adminis

23RISCO

abrir ↗

Referência✓ VexDay Proof

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

CVE-2006-6786—webappsphp

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting th

23RISCO

abrir ↗

Referência

CVE-2023-5009

CVE-2023-5009CRITICAL

Incorrect Authorization in GitLab

48RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - Remote Database Disclosure

CVE-2007-0638—webappsphp

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database content

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xpression News 1.0.1 - 'archives.php' Remote File Disclosure

CVE-2007-1040—webappsphp

Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4749—remotewindows

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato

23RISCO

abrir ↗

Referência

inoERP 4.15 - 'download' SQL Injection

CVE-2019-16894—webappsphp

download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ez Ringtone Manager - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6112—webappsphp

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

openMAINT openMAINT 2.1-3.3-b - 'Multiple' Persistent Cross-Site Scripting

CVE-2021-27695—webappsmultiple

Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2008-4141

CVE-2008-4141—

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-2325

CVE-2009-2325—

Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

CVE-2021-3111

CVE-2021-3111—

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.p

23RISCO

abrir ↗

Referência

CVE-2021-3111

CVE-2021-3111—

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.p

23RISCO

abrir ↗

Referência

CVE-2017-7398

CVE-2017-7398—

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacke

23RISCO

abrir ↗

Referência

CVE-2012-10046

CVE-2012-10046CRITICAL

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10046

CVE-2012-10046CRITICAL

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10046

CVE-2012-10046CRITICAL

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

63RISCO

abrir ↗

Referência

CVE-2017-14523

CVE-2017-14523—

WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NO

23RISCO

abrir ↗

Referência

CVE-2010-2858

CVE-2010-2858—

Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-2917

CVE-2010-2917—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2017-5881

CVE-2017-5881—

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspeci

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.