Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência✓ VexDay Proof

FOSS Gallery Public 1.0 - Arbitrary File Upload

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'font color' Remote Crash

CVE-2008-4514—doslinux

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a fo

23RISCO

abrir ↗

Referência

CVE-2017-14848

CVE-2017-14848—

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.

23RISCO

abrir ↗

Referência

CVE-2009-2395

CVE-2009-2395—

SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2009-3601

CVE-2009-3601—

Cross-site scripting (XSS) vulnerability in demo_page.php in Scriptsez Ultimate Poll allows remote attackers to inject a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ez Ringtone Manager - Multiple Remote File Disclosure Vulnerabilities

CVE-2008-6112—webappsphp

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência

CVE-2018-11415

CVE-2018-11415—

SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: th

23RISCO

abrir ↗

Referência

CVE-2004-1521

CVE-2004-1521—

Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPFootball 1.6 - Remote Database Disclosure

CVE-2007-0638—webappsphp

show.php in Vlad Alexa Mancini PHPFootball 1.6 allows remote attackers to obtain sensitive information (database content

23RISCO

abrir ↗

Referência

CVE-2010-4781

CVE-2010-4781—

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1219

CVE-2010-1219—

Directory traversal vulnerability in the JA News (com_janews) component 1.0 for Joomla! allows remote attackers to read

38RISCO

abrir ↗

Referência

CVE-2010-4781

CVE-2010-4781—

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2007-0122

CVE-2007-0122—

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated adminis

23RISCO

abrir ↗

Referência

inoERP 4.15 - 'download' SQL Injection

CVE-2019-16894—webappsphp

download.php in inoERP 4.15 allows SQL injection through insecure deserialization.

23RISCO

abrir ↗

Referência

CVE-2023-5009

CVE-2023-5009CRITICAL

Incorrect Authorization in GitLab

48RISCO

abrir ↗

Referência✓ VexDay Proof

Valdersoft Shopping Cart 3.0 - Remote Command Execution

CVE-2006-0099—webappsphp

PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/temp

23RISCO

abrir ↗

Referência✓ VexDay Proof

open NewsLetter 2.5 - Multiple Vulnerabilities (2)

CVE-2006-6786—webappsphp

Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xpression News 1.0.1 - 'archives.php' Remote File Disclosure

CVE-2007-1040—webappsphp

Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Real Estate Scripts 2008 - 'cat' SQL Injection

CVE-2008-4570—webappsphp

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-6363

CVE-2018-6363—

SQL Injection exists in Task Rabbit Clone 1.0 via the single_blog.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2017-9614

CVE-2017-9614—

The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2010-1711

CVE-2010-1711—

Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r

23RISCO

abrir ↗

Referência

CVE-2010-1711

CVE-2010-1711—

Cross-site scripting (XSS) vulnerability in carga_foto_al.php in Siestta 2.0, when register_globals is enabled, allows r

23RISCO

abrir ↗

Referência

CVE-2019-0570

CVE-2019-0570—

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windo

23RISCO

abrir ↗

Referência

CVE-2009-2923

CVE-2009-2923—

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files

23RISCO

abrir ↗

Referência

CVE-2012-5387

CVE-2012-5387—

Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - '/index.php' Local/Remote File Inclusion

CVE-2007-0987—webappsphp

Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência

CVE-2009-4386

CVE-2009-4386—

SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, whe

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.