Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

CVE-2007-6587

CVE-2007-6587—

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2015-1727

CVE-2015-1727—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Referência

CVE-2016-2494

CVE-2016-2494—

Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before

23RISCO

abrir ↗

Referência

CVE-2016-2494

CVE-2016-2494—

Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before

23RISCO

abrir ↗

Referência

CVE-2016-2776

CVE-2016-2776—

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly

60RISCO

abrir ↗

Referência

CVE-2018-6372

CVE-2018-6372—

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gizzar 03162002 - 'index.php' Remote File Inclusion

CVE-2006-6526—webappsphp

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2016-3081

CVE-2016-3081—

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

60RISCO

abrir ↗

Referência

CVE-2010-3266

CVE-2010-3266—

Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

IntelliTamper 2.07 - '.map' Local Arbitrary Code Execution (1)

CVE-2006-2494—localwindows

Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map f

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACGVclick 0.2.0 - 'path' Remote File Inclusion

CVE-2007-0577—webappsphp

PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2016-3081

CVE-2016-3081—

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

60RISCO

abrir ↗

Referência

CVE-2014-5090

CVE-2014-5090—

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell me

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion

CVE-2007-1818—webappsphp

PHP remote file inclusion vulnerability in MOD_forum_fields_parse.php in the Forum picture and META tags 1.7 module for

23RISCO

abrir ↗

Referência✓ VexDay Proof

YAAP 1.5 - '__autoload()' Remote File Inclusion

CVE-2007-2664—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2017-6547

CVE-2017-6547—

Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC

23RISCO

abrir ↗

Referência

CVE-2010-4858

CVE-2010-4858—

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência

CVE-2010-4858

CVE-2010-4858—

Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência

CVE-2016-6772

CVE-2016-6772—

An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code wi

23RISCO

abrir ↗

Referência

CVE-2009-4424

CVE-2009-4424—

SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2009-4424

CVE-2009-4424—

SQL injection vulnerability in results.php in the Pyrmont plugin 2 for WordPress allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scallywag - 'template.php?path' Remote File Inclusion

CVE-2007-2900—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Mod OpenID 0.2.0 - 'BBStore.php' Remote File Inclusion

CVE-2007-5173—webappsphp

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flat PHP Board 1.2 - Multiple Vulnerabilities

CVE-2007-6397—webappsphp

Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

NmnNewsletter 1.0.7 - 'output' Remote File Inclusion

CVE-2007-6585—webappsphp

PHP remote file inclusion vulnerability in confirmUnsubscription.php in NmnNewsletter 1.0.7 allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cyberfolio 7.12 - 'rep' Remote File Inclusion

CVE-2008-2228—webappsphp

PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

Million Dollar Text Links 1.0 - Arbitrary Authentication Bypass

CVE-2009-1582—webappsphp

Million Dollar Text Links 1.0 does not properly restrict administrator access to admin.home.php, which allows remote att

23RISCO

abrir ↗

Referência

CVE-2015-1428

CVE-2015-1428—

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2014-3442

CVE-2014-3442—

Winamp 5.666 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) via a malfor

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.