Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2009-4578

CVE-2009-4578—

Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

maGAZIn 2.0 - 'PHPThumb.php?src' Remote File Disclosure

CVE-2007-2643—webappsphp

Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-3738

CVE-2014-3738—

Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunLight CMS 5.3 - 'root' Remote File Inclusion

CVE-2007-2774—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência

CVE-2014-9610

CVE-2014-9610—

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an

23RISCO

abrir ↗

Referência

CVE-2014-9610

CVE-2014-9610—

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver R2 CMS - Arbitrary File Upload / Disclosure

CVE-2007-6651—webappsphp

Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive infor

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection

CVE-2006-0959—webappsphp

SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

acFTP FTP Server 1.4 - 'USER' Remote Buffer Overflow (PoC)

CVE-2006-2242—doswindows

acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) ch

23RISCO

abrir ↗

Referência✓ VexDay Proof

ItCMS 1.9 - 'boxpop.php' Remote Code Execution

CVE-2008-2192—webappsphp

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Jokesite 2.0 - 'cat_id' SQL Injection

CVE-2008-2457—webappsphp

SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

CVE-2008-4380—doshardware

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HT

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

CVE-2008-5749—remotewindows

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Siemens C450IP/C475IP - Remote Denial of Service

CVE-2008-7065—doshardware

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and dev

23RISCO

abrir ↗

Referência

CVE-2010-5239

CVE-2010-5239—

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users

23RISCO

abrir ↗

Referência

CVE-2011-0049

CVE-2011-0049—

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo

60RISCO

abrir ↗

Referência

CVE-2023-3049

CVE-2023-3049CRITICAL

File Upload in TMT's Lockcell

48RISCO

abrir ↗

Referência

CVE-2015-4631

CVE-2015-4631—

Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before

23RISCO

abrir ↗

Referência

CVE-2015-4631

CVE-2015-4631—

Multiple cross-site scripting (XSS) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before

23RISCO

abrir ↗

Referência

CVE-2021-44916

CVE-2021-44916—

Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad

23RISCO

abrir ↗

Referência

CVE-2009-4147

CVE-2009-4147—

The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear t

38RISCO

abrir ↗

Referência

CVE-2016-3643

CVE-2016-3643HIGHsob ataque

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio

71RISCO

abrir ↗

Referência

CVE-2016-3643

CVE-2016-3643HIGHsob ataque

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguratio

71RISCO

abrir ↗

Referência✓ VexDay Proof

TCExam 4.0.011 - 'SessionUserLang' Shell Injection

CVE-2007-2430—webappsphp

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by

23RISCO

abrir ↗

Referência

CVE-2017-6896

CVE-2017-6896—

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from

23RISCO

abrir ↗

Referência

CVE-2017-6896

CVE-2017-6896—

Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from

23RISCO

abrir ↗

Referência✓ VexDay Proof

2WIRE Modems/Routers - 'CRLF' Denial of Service

CVE-2006-4523—doshardware

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote at

23RISCO

abrir ↗

Referência

CVE-2018-20418

CVE-2018-20418—

index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.

23RISCO

abrir ↗

Referência

CVE-2018-11091

CVE-2018-11091CRITICAL

An issue was discovered in MyBiz MyProcureNet 5.0.0. A malicious file can be uploaded to the webserver by an attacker. I

48RISCO

abrir ↗

Referência✓ VexDay Proof

eIQnetworks ESA SEARCHREPORT - Remote Overflow (Metasploit)

CVE-2007-5699—remotewindows

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.