Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2007-1580

CVE-2007-1580—

FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive

23RISCO

abrir ↗

Referência

CVE-2019-18859

CVE-2019-18859—

Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6501—webappsasp

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Everything Development System Pre-1.0 - SQL Injection

CVE-2008-0724—webappsphp

The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartext

23RISCO

abrir ↗

Referência✓ VexDay Proof

Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting

CVE-2008-2534—webappsphp

Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

CubeCart 3.0.6 - Remote Command Execution

CVE-2006-0064—webappsphp

PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Poppler 0.8.4 - libpoppler Uninitialized pointer Code Execution

CVE-2008-2950—locallinux

The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not

28RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Mini 0.2.2 - Multiple Local File Inclusions

CVE-2008-2961—webappsphp

Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2012-4871

CVE-2012-4871—

Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.

23RISCO

abrir ↗

Referência

CVE-2010-2906

CVE-2010-2906—

SQL injection vulnerability in articlesdetails.php in ScriptsFeed and BrotherScripts (BS) Scripts Directory allows remot

23RISCO

abrir ↗

Referência

CVE-2018-6563

CVE-2018-6563—

Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow

23RISCO

abrir ↗

Referência

CVE-2018-6563

CVE-2018-6563—

Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow

23RISCO

abrir ↗

Referência

CVE-2010-4918

CVE-2010-4918—

PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-4918

CVE-2010-4918—

PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-0966

CVE-2010-0966—

PHP remote file inclusion vulnerability in inc/config.php in deV!L`z Clanportal (DZCP) 1.5.2, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

snetworks PHP Classifieds 5.0 - Remote File Inclusion

CVE-2008-0137—webappsphp

PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-2962—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or H

23RISCO

abrir ↗

Referência

CVE-2012-1912

CVE-2012-1912—

Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-1477

CVE-2015-1477—

SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure

CVE-2006-3571—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome 1.0.154.43 - Clickjacking

CVE-2009-0374—remotewindows

Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action th

23RISCO

abrir ↗

Referência

CVE-2014-9096

CVE-2014-9096—

Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2015-2070

CVE-2015-2070—

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2015-2070

CVE-2015-2070—

SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2015-1476

CVE-2015-1476—

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2015-1476

CVE-2015-1476—

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2012-3840

CVE-2012-3840—

Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote at

23RISCO

abrir ↗

Referência

CVE-2022-23046

CVE-2022-23046—

PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a su

28RISCO

abrir ↗

Referência

CVE-2015-1518

CVE-2015-1518—

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2015-1518

CVE-2015-1518—

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.