Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2017-7004

CVE-2017-7004—

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The

23RISCO

abrir ↗

Referência

CVE-2018-0882

CVE-2018-0882—

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an el

23RISCO

abrir ↗

Referência✓ VexDay Proof

Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload

CVE-2008-6178—webappsphp

Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

Newswriter SW 1.42 - 'editfunc.inc.php' File Inclusion

CVE-2006-5102—webappsphp

PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow

CVE-2007-2770—remotewindows

Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long

23RISCO

abrir ↗

Referência✓ VexDay Proof

OZJournals 2.1.1 - 'id' File Disclosure

CVE-2008-0435—webappsphp

Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

MG-SOFT Net Inspector 6.5.0.828 - Multiple Vulnerabilities

CVE-2008-1400—remotewindows

Directory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net Inspector 6.5.0.828 and earl

23RISCO

abrir ↗

Referência✓ VexDay Proof

gelato CMS 0.95 - 'img' Remote File Disclosure

CVE-2008-3675—webappsphp

Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2013-6674

CVE-2013-6674—

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.1

23RISCO

abrir ↗

Referência

CVE-2011-5129

CVE-2011-5129—

Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and p

23RISCO

abrir ↗

Referência

CVE-2012-3578

CVE-2012-3578—

Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress

23RISCO

abrir ↗

Referência

CVE-2017-3813

CVE-2017-3813—

A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows c

23RISCO

abrir ↗

Referência

CVE-2022-0020

CVE-2022-0020MEDIUM

Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

33RISCO

abrir ↗

Referência

CVE-2012-5849

CVE-2012-5849—

Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2014-3136

CVE-2014-3136—

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote a

23RISCO

abrir ↗

Referência

CVE-2018-6940

CVE-2018-6940—

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote

23RISCO

abrir ↗

Referência

CVE-2018-6940

CVE-2018-6940—

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote

23RISCO

abrir ↗

Referência

CVE-2009-4475

CVE-2009-4475—

SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

php-fusion 9.03.50 - Persistent Cross-Site Scripting

CVE-2020-12706—webappsphp

Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

CVE-2006-5400—webappsphp

PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyCMS 0.9.8 - Remote Command Execution (1)

CVE-2007-3587—webappsphp

MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.2 - Multiple Vulnerabilities

CVE-2007-5452—webappsphp

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

xeCMS 1.x - 'view.php' Remote File Disclosure

CVE-2007-6508—webappsphp

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pollbooth 2.0 - 'pollID' SQL Injection

CVE-2008-4765—webappsphp

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2015-2838

CVE-2015-2838—

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote

23RISCO

abrir ↗

Referência

CVE-2010-1935

CVE-2010-1935—

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al

23RISCO

abrir ↗

Referência

CVE-2024-0399

CVE-2024-0399HIGH

WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection

41RISCO

abrir ↗

Referência

CVE-2018-9137

CVE-2018-9137—

Open-AudIT before 2.2 has CSV Injection.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module htmltonuke 2.0alpha - 'htmltonuke.php' Remote File Inclusion

CVE-2006-0308—webappsphp

PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, modu

23RISCO

abrir ↗

Referência

CVE-2016-4486

CVE-2016-4486—

The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.