Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2017-17585

CVE-2017-17585—

FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17586

CVE-2017-17586—

FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17588

CVE-2017-17588—

FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id par

23RISCO

abrir ↗

Referência

CVE-2017-17589

CVE-2017-17589—

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame

23RISCO

abrir ↗

Referência

CVE-2017-17589

CVE-2017-17589—

FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame

23RISCO

abrir ↗

Referência

CVE-2017-17592

CVE-2017-17592—

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17592

CVE-2017-17592—

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17594

CVE-2017-17594—

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17594

CVE-2017-17594—

DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17595

CVE-2017-17595—

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.

23RISCO

abrir ↗

Referência

CVE-2022-38580

CVE-2022-38580CRITICAL

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

53RISCO

abrir ↗

Referência

CVE-2022-39291

CVE-2022-39291MEDIUM

Denial of service through logs in zoneminder

33RISCO

abrir ↗

Referência

CVE-2017-17596

CVE-2017-17596—

Entrepreneur Job Portal Script 2.0.6 has SQL Injection via the jobsearch_all.php rid1 parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17598

CVE-2017-17598—

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISCO

abrir ↗

Referência

CVE-2022-40946

CVE-2022-40946HIGH

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via t

41RISCO

abrir ↗

Referência

CVE-2022-41358

CVE-2022-41358MEDIUM

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary

33RISCO

abrir ↗

Referência

CVE-2022-41413

CVE-2022-41413MEDIUM

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attack

33RISCO

abrir ↗

Referência

CVE-2022-42889

CVE-2022-42889—

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

60RISCO

abrir ↗

Referência

CVE-2017-5817

CVE-2017-5817—

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

60RISCO

abrir ↗

Referência

CVE-2022-48197

CVE-2022-48197—

Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, Tree

38RISCO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISCO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISCO

abrir ↗

Referência

CVE-2023-0493

CVE-2023-0493MEDIUM

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

33RISCO

abrir ↗

Referência

CVE-2023-0527

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RISCO

abrir ↗

Referência

CVE-2023-0669

CVE-2023-0669HIGHsob ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RISCO

abrir ↗

Referência

CVE-2023-0669

CVE-2023-0669HIGHsob ataqueransomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

100RISCO

abrir ↗

Referência

CVE-2023-0777

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RISCO

abrir ↗

Referência

EasyNas 1.1.0 - OS Command Injection

CVE-2023-0830MEDIUMremotehardware

EasyNAS backup.pl system os command injection

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.