Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2018-4090

CVE-2018-4090—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS

23RISCO

abrir ↗

Referência

CVE-2019-19230

CVE-2019-19230CRITICAL

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component th

48RISCO

abrir ↗

Referência

CVE-2015-3933

CVE-2015-3933—

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module galleria 1.0b - Remote File Inclusion

CVE-2006-3396—webappsphp

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows r

23RISCO

abrir ↗

Referência

CVE-2015-5066

CVE-2015-5066—

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2015-5066

CVE-2015-5066—

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2019-1148

CVE-2019-1148MEDIUM

Microsoft Graphics Component Information Disclosure Vulnerability

33RISCO

abrir ↗

Referência

CVE-2007-2792

CVE-2007-2792—

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f

23RISCO

abrir ↗

Referência

CVE-2007-2792

CVE-2007-2792—

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f

23RISCO

abrir ↗

Referência

CVE-2020-15038

CVE-2020-15038—

The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.

23RISCO

abrir ↗

Referência

CVE-2008-3164

CVE-2008-3164—

Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-107 Plugin ZoGo-Shop 1.16 Beta 13 - SQL Injection

CVE-2008-2447—webappsphp

SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows rem

23RISCO

abrir ↗

Referência

Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)

CVE-2021-31674—webappsmultiple

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRecipeBook 2.35 - 'g_rb_basedir' Remote File Inclusion

CVE-2006-5399—webappsphp

PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection

CVE-2009-1780—webappsphp

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, wh

23RISCO

abrir ↗

Referência

CVE-2010-5057

CVE-2010-5057—

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyAlbum 3.02 - 'language.inc.php' Remote File Inclusion

CVE-2006-5865—webappsphp

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-5059

CVE-2010-5059—

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-5059

CVE-2010-5059—

SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2009-4932

CVE-2009-4932—

Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application

23RISCO

abrir ↗

Referência

CVE-2016-3694

CVE-2016-3694—

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-modul

23RISCO

abrir ↗

Referência

CVE-2020-15364

CVE-2020-15364—

The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.

23RISCO

abrir ↗

Referência

CVE-2010-2102

CVE-2010-2102—

Buffer overflow in Webby Webserver 1.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.

23RISCO

abrir ↗

Referência

CVE-2009-2275

CVE-2009-2275—

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-4862

CVE-2013-4862—

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to

23RISCO

abrir ↗

Referência

CVE-2013-4862

CVE-2013-4862—

MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to

23RISCO

abrir ↗

Referência

CVE-2015-2365

CVE-2015-2365—

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server

23RISCO

abrir ↗

Referência✓ VexDay Proof

CandyPress eCommerce suite 4.1.1.26 - Multiple Vulnerabilities

CVE-2008-0547—webappsasp

Cross-site scripting (XSS) vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and probably ear

23RISCO

abrir ↗

Referência

CVE-2009-2784

CVE-2009-2784—

Multiple directory traversal vulnerabilities in dit.cms 1.3, when register_globals is enabled, allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2008-6495

CVE-2008-6495—

Cross-site scripting (XSS) vulnerability in index.php in Fritz Berger yet another php photo album - next generation (yap

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.