Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.966exploits catalogados

35.269CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 22.166GitHub PoC 14.062VulnCheck XDB 8.571Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

PHPortal 1.0 - Insecure Cookie Handling

CVE-2009-2117—webappsphp

uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by sett

23RISCO

abrir ↗

Referência

CVE-2010-1043

CVE-2010-1043—

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2009-4957

CVE-2009-4957—

Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary file

23RISCO

abrir ↗

Referência

CVE-2009-4683

CVE-2009-4683—

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-3822

CVE-2009-3822—

PHP remote file inclusion vulnerability in Fiji Web Design Ajax Chat (com_ajaxchat) component 1.0 for Joomla! allows rem

23RISCO

abrir ↗

Referência

CVE-2018-8908

CVE-2018-8908—

An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CS

23RISCO

abrir ↗

Referência

CVE-2019-3501

CVE-2019-3501—

The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pag

23RISCO

abrir ↗

Referência

CVE-2010-2336

CVE-2010-2336—

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the

23RISCO

abrir ↗

Referência

CVE-2010-2920

CVE-2010-2920—

Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow

38RISCO

abrir ↗

Referência

CVE-2010-3742

CVE-2010-3742—

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac

23RISCO

abrir ↗

Referência

CVE-2014-3434

CVE-2014-3434—

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,

23RISCO

abrir ↗

Referência

CVE-2014-3434

CVE-2014-3434—

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b,

23RISCO

abrir ↗

Referência

CVE-2012-0932

CVE-2012-0932—

Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-10038

CVE-2012-10038CRITICAL

Auxilium RateMyPet Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

creative Guestbook 1.0 - Multiple Vulnerabilities

CVE-2007-1480—webappsphp

Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini File Host 1.2 - 'language' Local File Inclusion

CVE-2008-0357—webappsphp

Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kmita Tellfriend 2.0 - 'file' Remote File Inclusion

CVE-2008-2198—webappsphp

PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2984—webappsphp

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

CVE-2008-4613—webappsasp

SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSHOP100 - 'SUB' SQL Injection

CVE-2008-5190—webappsphp

SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the S

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebMaster Marketplace - SQL Injection

CVE-2008-5574—webappsphp

SQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenX 2.6 - 'bannerid' Blind SQL Injection

CVE-2008-6163—webappsphp

SQL injection vulnerability in www/delivery/ac.php in OpenX 2.6.1 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections

CVE-2008-6608—webappsphp

Multiple SQL injection vulnerabilities in DevelopItEasy Events Calendar 1.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-1925

CVE-2010-1925—

SQL injection vulnerability in makale.php in tekno.Portal 0.1b allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2009-4220

CVE-2009-4220—

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2009-4220

CVE-2009-4220—

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2010-1928

CVE-2010-1928—

Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,

23RISCO

abrir ↗

Referência

CVE-2009-4553

CVE-2009-4553—

Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos

23RISCO

abrir ↗

Referência

CVE-2014-9344

CVE-2014-9344—

Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authe

23RISCO

abrir ↗

Referência

CVE-2023-33148

CVE-2023-33148HIGH

Microsoft Office Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.