Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência✓ VexDay Proof

Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)

CVE-2006-7071—webappsphp

SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Repository - 'viewcat.php' SQL Injection

CVE-2007-1847—webappsphp

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2015-4658

CVE-2015-4658—

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-4236

CVE-2010-4236—

Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to

23RISCO

abrir ↗

Referência

CVE-2014-9445

CVE-2014-9445—

SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2009-4791

CVE-2009-4791—

Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2013-6767

CVE-2013-6767—

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary co

23RISCO

abrir ↗

Referência

CVE-2013-6767

CVE-2013-6767—

Stack-based buffer overflow in pepoly.dll in Quick Heal AntiVirus Pro 7.0.0.1 allows local users to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRaid < 3.0.7 - 'rss.php?PHPraid_dir' Remote File Inclusion

CVE-2006-3317—webappsphp

PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in

28RISCO

abrir ↗

Referência

CVE-2015-8431

CVE-2015-8431—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection

CVE-2007-1292—webappsphp

SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, mi

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetVIOS 2.0 - 'page.asp' SQL Injection

CVE-2006-5954—webappsasp

SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2011-10032

CVE-2011-10032CRITICAL

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

63RISCO

abrir ↗

Referência

CVE-2011-10032

CVE-2011-10032CRITICAL

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

63RISCO

abrir ↗

Referência

CVE-2011-10032

CVE-2011-10032CRITICAL

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

63RISCO

abrir ↗

Referência

CVE-2009-3162

CVE-2009-3162—

Cross-site scripting (XSS) vulnerability in Multi Website 1.5 allows remote attackers to inject arbitrary web script or

23RISCO

abrir ↗

Referência

CVE-2010-1112

CVE-2010-1112—

Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência

CVE-2009-20005

CVE-2009-20005CRITICAL

InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-20005

CVE-2009-20005CRITICAL

InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-4858

CVE-2009-4858—

Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2009-4868

CVE-2009-4868—

Cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2009-3901

CVE-2009-3901—

Multiple cross-site scripting (XSS) vulnerabilities in e-Courier CMS allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência

CVE-2009-3833

CVE-2009-3833—

Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2010-1350

CVE-2010-1350—

SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

ILIAS 3.7.4 - 'ref_id' Blind SQL Injection

CVE-2008-5816—webappsphp

SQL injection vulnerability in repository.php in ILIAS 3.7.4 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2015-8562

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISCO

abrir ↗

Referência

CVE-2015-8562

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISCO

abrir ↗

Referência

CVE-2015-1875

CVE-2015-1875—

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2015-1875

CVE-2015-1875—

SQL injection vulnerability in a2billing/customer/iridium_threed.php in Elastix 2.5.0 and earlier allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2015-8562

CVE-2015-8562—

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.