Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência✓ VexDay Proof

Sciurus Hosting Panel - Remote Code Injection

CVE-2007-6082—webappsphp

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gradman 0.1.3 - 'agregar_info.php' Local File Inclusion

CVE-2008-0361—webappsphp

Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência

CVE-2011-2523

CVE-2011-2523—

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

abrir ↗

Referência

CVE-2022-29851

CVE-2022-29851CRITICAL

documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Inj

48RISCO

abrir ↗

Referência

CVE-2017-17721

CVE-2017-17721—

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, ass

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libc - 'libc:fts_*()' Local Denial of Service

CVE-2009-0537—dosbsd

Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0

23RISCO

abrir ↗

Referência

CVE-2020-9371

CVE-2020-9371—

Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

GeBlog 0.1 (Windows) - GLOBALS[tplname] Local File Inclusion

CVE-2007-1577—webappsphp

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2016-7384

CVE-2016-7384—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RISCO

abrir ↗

Referência

CVE-2017-8471

CVE-2017-8471—

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2,

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke pnFlashGames Module 1.5 - SQL Injection

CVE-2007-2427—webappsphp

SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-1335

CVE-2010-1335—

Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when register_globals is enabled, allow remote

23RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência✓ VexDay Proof

TLM CMS 3.2 - Multiple SQL Injections

CVE-2007-4808—webappsphp

Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Referência✓ VexDay Proof

427bb 2.3.1 - SQL Injection / Cross-Site Scripting

CVE-2008-2560—webappsphp

SQL injection vulnerability in showpost.php in 427BB 2.3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência✓ VexDay Proof

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

CVE-2008-3305—webappsphp

Cross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-2995

CVE-2014-2995—

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allo

23RISCO

abrir ↗

Referência

CVE-2009-3716

CVE-2009-3716—

Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-8840

CVE-2017-8840—

Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before f

23RISCO

abrir ↗

Referência

CVE-2012-0699

CVE-2012-0699—

Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow re

23RISCO

abrir ↗

Referência

CVE-2023-37759

CVE-2023-37759—

Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticat

23RISCO

abrir ↗

Referência

CVE-2021-33570

CVE-2021-33570—

Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can

23RISCO

abrir ↗

Referência

CVE-2021-33570

CVE-2021-33570—

Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion

CVE-2007-4231—webappsphp

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1340

CVE-2010-1340—

Directory traversal vulnerability in jresearch.php in the J!Research (com_jresearch) component for Joomla! allows remote

43RISCO

abrir ↗

Referência✓ VexDay Proof

e107 module 123 flash chat 6.8.0 - Remote File Inclusion

CVE-2008-1989—webappsphp

PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Jotloader 1.2.1.a - Blind SQL Injection

CVE-2008-2564—webappsphp

SQL injection vulnerability in the JotLoader (com_jotloader) component 1.2.1.a and earlier for Joomla! allows remote att

23RISCO

abrir ↗

Referência

CVE-2008-2565

CVE-2008-2565—

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.