Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2023-3843

CVE-2023-3843LOW

mooSocial mooDating URL question cross site scripting

43RISCO

abrir ↗

Referência✓ VexDay Proof

Weblosninger 4 - Cross-Site Scripting / SQL Injection

CVE-2008-2506—webappsphp

Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mega File Hosting Script 1.2 - 'fid' SQL Injection

CVE-2008-2521—webappsphp

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authe

23RISCO

abrir ↗

Referência

CVE-2010-1307

CVE-2010-1307—

Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers

43RISCO

abrir ↗

Referência✓ VexDay Proof

File Store PRO 3.2 - Multiple Blind SQL Injections

CVE-2006-1278—webappsphp

SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9 - Remote File Inclusion

CVE-2006-2392—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.

23RISCO

abrir ↗

Referência

CVE-2018-18548

CVE-2018-18548—

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi

23RISCO

abrir ↗

Referência

CVE-2018-18548

CVE-2018-18548—

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi

23RISCO

abrir ↗

Referência

CVE-2010-2254

CVE-2010-2254—

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-2254

CVE-2010-2254—

SQL injection vulnerability in the Shape5 Bridge of Hope template for Joomla! allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2006-0944

CVE-2006-0944—

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

23RISCO

abrir ↗

Referência

CVE-2013-2760

CVE-2013-2760—

Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m

23RISCO

abrir ↗

Referência

CVE-2014-4944

CVE-2014-4944—

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress al

23RISCO

abrir ↗

Referência

CVE-2015-2554

CVE-2015-2554—

The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10

23RISCO

abrir ↗

Referência

CVE-2015-8261

CVE-2015-8261—

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized

23RISCO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.13 - Remote File Inclusion

CVE-2007-5117—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

MailBee Objects 5.5 - 'MailBee.dll' Remote Insecure Method

CVE-2008-0631—remotewindows

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-2565—webappsphp

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creator CMS 5.0 - 'sideid' SQL Injection

CVE-2008-7001—webappsasp

Unrestricted file upload vulnerability in the file manager in Creative Mind Creator CMS 5.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-0366

CVE-2010-0366—

Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Scri

23RISCO

abrir ↗

Referência

CVE-2012-1059

CVE-2012-1059—

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce O

23RISCO

abrir ↗

Referência

CVE-2012-1059

CVE-2012-1059—

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce O

23RISCO

abrir ↗

Referência

CVE-2016-6253

CVE-2016-6253—

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISCO

abrir ↗

Referência

CVE-2016-6253

CVE-2016-6253—

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISCO

abrir ↗

Referência

CVE-2016-6253

CVE-2016-6253—

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISCO

abrir ↗

Referência

CVE-2009-2229

CVE-2009-2229—

Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência

CVE-2015-2183

CVE-2015-2183—

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execut

23RISCO

abrir ↗

Referência

CVE-2015-2183

CVE-2015-2183—

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execut

23RISCO

abrir ↗

Referência

CVE-2013-4759

CVE-2013-4759—

Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 fo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galeria Zdjec 3.0 - 'zd_numer.php' Local File Inclusion

CVE-2007-0637—webappsphp

Directory traversal vulnerability in zd_numer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.