Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.607exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.974VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2010-1354

CVE-2010-1354—

Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'filepath' Remote File Disclosure

CVE-2007-6187—webappsphp

Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote at

23RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP-Forum 1.7.4 - SQL Injection

CVE-2008-0388—webappsphp

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

CVE-2008-2634—webappsasp

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

1Book Guestbook Script 1.0.1 - Code Execution

CVE-2008-2638—webappsphp

Static code injection vulnerability in guestbook.php in 1Book 1.0.1 and earlier allows remote attackers to upload arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

CVE-2008-5061—webappsphp

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'load' Remote Crash

CVE-2008-5698—doslinux

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyKtools 2.4 - Arbitrary Database Backup

CVE-2008-6815—webappsphp

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a

23RISCO

abrir ↗

Referência

CVE-2009-3247

CVE-2009-3247—

Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2020-7108

CVE-2020-7108—

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

23RISCO

abrir ↗

Referência

CVE-2017-0214

CVE-2017-0214—

Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2

23RISCO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Referência✓ VexDay Proof

Built2Go PHP Movie Review 2B - Remote File Inclusion

CVE-2006-2008—webappsphp

PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attac

23RISCO

abrir ↗

Referência

CVE-2004-1493

CVE-2004-1493—

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple c

23RISCO

abrir ↗

Referência

CVE-2010-1366

CVE-2010-1366—

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-1366

CVE-2010-1366—

Multiple SQL injection vulnerabilities in admin/admin_login.php in Uiga Fan Club 1.0 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

mg.applanix 1.3.1 - 'apx_root_path' Remote File Inclusion

CVE-2006-6341—webappsphp

Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nuked-klaN 1.7.6 - Remote Code Execution

CVE-2007-2556—webappsphp

SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forw

23RISCO

abrir ↗

Referência✓ VexDay Proof

sk.log 0.5.3 - 'skin_url' Remote File Inclusion

CVE-2007-5089—webappsphp

PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Insanely Simple Blog 0.5 - SQL Injection

CVE-2008-2670—webappsphp

Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component iJoomla! News Portal 1.0 - 'itemID' SQL Injection

CVE-2008-2676—webappsphp

SQL injection vulnerability in the iJoomla News Portal (com_news_portal) component 1.0 and earlier for Joomla! allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Telephone Directory 2008 - SQL Injection / Cross-Site Scripting

CVE-2008-2677—webappsphp

Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

reSIProcate 1.3.2 - Remote Denial of Service (PoC)

CVE-2008-3210—dosmultiple

rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daem

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCMS 3.1 - 'skin' Local File Inclusion

CVE-2008-4526—webappsphp

Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local f

23RISCO

abrir ↗

Referência

CVE-2009-2383

CVE-2009-2383—

SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4088

CVE-2009-4088—

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-4088

CVE-2009-4088—

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-3561

CVE-2009-3561—

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.