Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2018-6940

CVE-2018-6940—

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote

23RISCO

abrir ↗

Referência

CVE-2009-4475

CVE-2009-4475—

SQL injection vulnerability in the Joomlub (com_joomlub) component for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

php-fusion 9.03.50 - Persistent Cross-Site Scripting

CVE-2020-12706—webappsphp

Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

CVE-2006-5400—webappsphp

PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyCMS 0.9.8 - Remote Command Execution (1)

CVE-2007-3587—webappsphp

MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.2 - Multiple Vulnerabilities

CVE-2007-5452—webappsphp

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

xeCMS 1.x - 'view.php' Remote File Disclosure

CVE-2007-6508—webappsphp

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pollbooth 2.0 - 'pollID' SQL Injection

CVE-2008-4765—webappsphp

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2015-2838

CVE-2015-2838—

Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote

23RISCO

abrir ↗

Referência

CVE-2010-1935

CVE-2010-1935—

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al

23RISCO

abrir ↗

Referência

CVE-2024-0399

CVE-2024-0399HIGH

WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection

41RISCO

abrir ↗

Referência

CVE-2018-9137

CVE-2018-9137—

Open-AudIT before 2.2 has CSV Injection.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module htmltonuke 2.0alpha - 'htmltonuke.php' Remote File Inclusion

CVE-2006-0308—webappsphp

PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, modu

23RISCO

abrir ↗

Referência

CVE-2016-4486

CVE-2016-4486—

The rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuoteBook - Remote Configuration File Disclosure

CVE-2009-0828—webappsphp

QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain

23RISCO

abrir ↗

Referência

CVE-2014-4511

CVE-2014-4511—

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RISCO

abrir ↗

Referência

CVE-2018-15918

CVE-2018-15918—

An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permission

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloginator 1a - Cookie Bypass / SQL Injection

CVE-2009-1050—webappsphp

Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYou

23RISCO

abrir ↗

Referência

CVE-2012-10020

CVE-2012-10020CRITICAL

FoxyPress <= 0.4.2.1 - Arbitrary File Upload

63RISCO

abrir ↗

Referência✓ VexDay Proof

PortailPHP mod_phpalbum 2.1.5 - 'chemin' Remote File Inclusion

CVE-2006-4498—webappsphp

PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vitrax Pre-modded 1.0.6-r3 - Remote File Inclusion

CVE-2006-4779—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion

CVE-2007-1801—webappsphp

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Jobs 2.4 - 'cid' SQL Injection

CVE-2007-2370—webappsphp

SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat Zip ActiveX Component 12.4 - Multiple Insecure Methods

CVE-2007-3633—remotewindows

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 al

23RISCO

abrir ↗

Referência✓ VexDay Proof

DevMass Shopping Cart 1.0 - Remote File Inclusion

CVE-2007-6133—webappsphp

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Anon Proxy Server 0.1000 - Remote Command Execution

CVE-2007-6459—webappsphp

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência✓ VexDay Proof

TlAds 1.0 - Remote Insecure Cookie Handling

CVE-2008-4783—webappsphp

tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login coo

23RISCO

abrir ↗

Referência

CVE-2009-4627

CVE-2009-4627—

Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2017-15972

CVE-2017-15972—

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php

23RISCO

abrir ↗

Referência

CVE-2017-15972

CVE-2017-15972—

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.