Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2018-25114

CVE-2018-25114CRITICAL

osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2018-25114

CVE-2018-25114CRITICAL

osCommerce 2.3.4.1 Installer Unauthenticated Configuration File Injection PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2012-3838

CVE-2012-3838—

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/b

23RISCO

abrir ↗

Referência✓ VexDay Proof

TemaTres 1.0.3 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2009-1583—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in TemaTres 1.0.3 and 1.031 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

TFT Gallery 0.10 - Password Disclosure

CVE-2006-1412—webappsphp

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência

CVE-2008-3371

CVE-2008-3371—

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion

CVE-2006-7132—webappsphp

Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2020-22841

CVE-2020-22841—

Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution

23RISCO

abrir ↗

Referência

CVE-2010-1345

CVE-2010-1345—

Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Social Engine 2.0 - Multiple Local File Inclusions

CVE-2007-6581—webappsphp

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

SezHoo 0.1 - Remote File Inclusion

CVE-2008-4704—webappsphp

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-0366

CVE-2010-0366—

Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Scri

23RISCO

abrir ↗

Referência

CVE-2018-25372

CVE-2018-25372HIGH

MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

41RISCO

abrir ↗

Referência

CVE-2012-1059

CVE-2012-1059—

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce O

23RISCO

abrir ↗

Referência

CVE-2012-1059

CVE-2012-1059—

Cross-site scripting (XSS) vulnerability in osCommerce/OM/Core/Site/Shop/Application/Cart/pages/main.php in OSCommerce O

23RISCO

abrir ↗

Referência

CVE-2016-6253

CVE-2016-6253—

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISCO

abrir ↗

Referência

CVE-2016-6253

CVE-2016-6253—

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or

38RISCO

abrir ↗

Referência

CVE-2009-2229

CVE-2009-2229—

Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência

CVE-2013-4759

CVE-2013-4759—

Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 fo

23RISCO

abrir ↗

Referência

CVE-2011-4716

CVE-2011-4716—

Directory traversal vulnerability in file in DreamBox DM800 1.6rc3, 1.5rc1, and earlier allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2010-1346

CVE-2010-1346—

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

cattaDoc 2.21 - 'download2.php?fn1' Remote File Disclosure

CVE-2007-1930—webappsphp

Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

FireConfig 0.5 - 'dl.php' Remote File Disclosure

CVE-2007-5782—webappsphp

Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents 1.4.5 - 'index.php?link' Remote File Disclosure

CVE-2007-6368—webappsphp

Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

UploadImage/UploadScript 1.0 - Remote Change Admin Password

CVE-2008-0246—webappsphp

admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which a

23RISCO

abrir ↗

Referência✓ VexDay Proof

ErfurtWiki R1.02b - Local File Inclusion

CVE-2008-2672—webappsphp

Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow r

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeeBuddy 2.1 - 'adid' SQL Injection

CVE-2008-3604—webappsphp

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-1346

CVE-2010-1346—

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

CVE-2013-3527

CVE-2013-3527—

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.