Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2007-2792

CVE-2007-2792—

SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module galleria 1.0b - Remote File Inclusion

CVE-2006-3396—webappsphp

PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows r

23RISCO

abrir ↗

Referência

CVE-2020-15038

CVE-2020-15038—

The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS.

23RISCO

abrir ↗

Referência

CVE-2008-3164

CVE-2008-3164—

Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)

CVE-2021-31674—webappsmultiple

Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRecipeBook 2.35 - 'g_rb_basedir' Remote File Inclusion

CVE-2006-5399—webappsphp

PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyAlbum 3.02 - 'language.inc.php' Remote File Inclusion

CVE-2006-5865—webappsphp

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-5057

CVE-2010-5057—

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2023-0224

CVE-2023-0224CRITICAL

GiveWP < 2.24.1 - Unauthenticated SQLi

48RISCO

abrir ↗

Referência

CVE-2014-10031

CVE-2014-10031—

Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-14960

CVE-2017-14960—

xDashboard in OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 has SQL I

23RISCO

abrir ↗

Referência✓ VexDay Proof

Siemens C450IP/C475IP - Remote Denial of Service

CVE-2008-7065—doshardware

Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and dev

23RISCO

abrir ↗

Referência

CVE-2010-1299

CVE-2010-1299—

Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di

28RISCO

abrir ↗

Referência

CVE-2009-4578

CVE-2009-4578—

Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

acFTP FTP Server 1.4 - 'USER' Remote Buffer Overflow (PoC)

CVE-2006-2242—doswindows

acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) ch

23RISCO

abrir ↗

Referência

CVE-2014-3738

CVE-2014-3738—

Cross-site scripting (XSS) vulnerability in Zenoss 4.2.5 allows remote attackers to inject arbitrary web script or HTML

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpCMS 04.10.2007 - 'site' Remote File Inclusion

CVE-2007-2009—webappsphp

PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2014-9610

CVE-2014-9610—

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an

23RISCO

abrir ↗

Referência

CVE-2014-9610

CVE-2014-9610—

Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication an

23RISCO

abrir ↗

Referência✓ VexDay Proof

maGAZIn 2.0 - 'PHPThumb.php?src' Remote File Disclosure

CVE-2007-2643—webappsphp

Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunLight CMS 5.3 - 'root' Remote File Inclusion

CVE-2007-2774—webappsphp

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver R2 CMS - Arbitrary File Upload / Disclosure

CVE-2007-6651—webappsphp

Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive infor

23RISCO

abrir ↗

Referência

CVE-2015-1578

CVE-2015-1578—

Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

ItCMS 1.9 - 'boxpop.php' Remote Code Execution

CVE-2008-2192—webappsphp

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Jokesite 2.0 - 'cat_id' SQL Injection

CVE-2008-2457—webappsphp

SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

CVE-2008-4380—doshardware

The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HT

23RISCO

abrir ↗

Referência✓ VexDay Proof

Google Chrome - 'ChromeHTML://' Remote Parameter Injection

CVE-2008-5749—remotewindows

Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-5239

CVE-2010-5239—

Untrusted search path vulnerability in DAEMON Tools Lite 4.35.6.0091 and Pro Standard 4.36.0309.0160 allows local users

23RISCO

abrir ↗

Referência

CVE-2011-0049

CVE-2011-0049—

Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo

60RISCO

abrir ↗

Referência

CVE-2018-25126

CVE-2018-25126CRITICAL

TVT NVMS-9000 Hard-coded API Credentials & Command Injection

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.