Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2015-6512

CVE-2015-6512—

SQL injection vulnerability in the get_messages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows

23RISCO

abrir ↗

Referência

CVE-2011-4674

CVE-2011-4674—

SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows rem

23RISCO

abrir ↗

Referência

CVE-2019-16531

CVE-2019-16531—

LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.

23RISCO

abrir ↗

Referência

CVE-2023-34723

CVE-2023-34723—

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Online Fantasy Football League (OFFL) 0.2.6 - 'teams.php' SQL Injection

CVE-2008-2890—webappsphp

Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2016-4313

CVE-2016-4313—

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Calendar Script 1.1 - Insecure Cookie Handling

CVE-2008-5738—webappsphp

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by s

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPAuctionSystem - Insecure Cookie Handling

CVE-2009-0108—webappsphp

PHPAuctions (aka PHPAuctionSystem) allows remote attackers to bypass authentication and gain administrative access via m

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component EXP Shop - 'catid' SQL Injection

CVE-2008-2892—webappsphp

SQL injection vulnerability in the EXP Shop (com_expshop) component 1.0 for Joomla! allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2006-0074

CVE-2006-0074—

SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2016-4314

CVE-2016-4314—

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated admini

28RISCO

abrir ↗

Referência

CVE-2016-4315

CVE-2016-4315—

Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authenticatio

23RISCO

abrir ↗

Referência

CVE-2016-4316

CVE-2016-4316—

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2016-4437

CVE-2016-4437CRITICALsob ataque

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

Referência

CVE-2010-1657

CVE-2010-1657—

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2016-4437

CVE-2016-4437CRITICALsob ataque

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1658

CVE-2010-1658—

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-1681

CVE-2010-1681—

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to ex

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyAgenda 3.1 - '/templates/header.php3' Local File Inclusion

CVE-2006-5263—webappsphp

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to inc

23RISCO

abrir ↗

Referência

CVE-2019-0552

CVE-2019-0552—

An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."

23RISCO

abrir ↗

Referência

CVE-2014-9146

CVE-2014-9146—

Multiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2012-5242

CVE-2012-5242—

Directory traversal vulnerability in functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-4467

CVE-2009-4467—

misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail actio

23RISCO

abrir ↗

Referência

CVE-2009-2327

CVE-2009-2327—

Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.