Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution

CVE-2008-4342—remotewindows

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used

28RISCO

abrir ↗

Referência

CVE-2017-13878

CVE-2017-13878—

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graph

23RISCO

abrir ↗

Referência

CVE-2014-0621

CVE-2014-0621—

Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module HTMLArea3 1.5 - Remote File Inclusion

CVE-2006-3751—webappsphp

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_html

23RISCO

abrir ↗

Referência✓ VexDay Proof

eReservations - Authentication Bypass

CVE-2009-0252—webappsasp

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

CVE-2009-1229—webappsphp

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the u

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

CVE-2007-1962—webappsphp

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

CVE-2007-3933—webappsphp

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate - 'fullnews.php?id' SQL Injection

CVE-2007-6462—webappsphp

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'Cuid' cookie Blind SQL Injection

CVE-2008-0734—webappsphp

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-4186

CVE-2010-4186—

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodealers CMS AutOnline - 'id' SQL Injection

CVE-2008-4074—webappsphp

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-3002

CVE-2009-3002—

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo

23RISCO

abrir ↗

Referência

CVE-2009-2328

CVE-2009-2328—

admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot

23RISCO

abrir ↗

Referência

CVE-2010-4913

CVE-2010-4913—

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

CVE-2008-4345—webappsphp

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2007-5817

CVE-2007-5817MEDIUM

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1

33RISCO

abrir ↗

Referência✓ VexDay Proof

Injader CMS 2.1.1 - 'id' SQL Injection

CVE-2008-5890—webappsphp

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2018-17775

CVE-2018-17775—

Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us

23RISCO

abrir ↗

Referência

CVE-2016-1287

CVE-2016-1287—

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0

45RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6881—webappsphp

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-2234

CVE-2009-2234—

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

LocazoList 2.01a beta5 - 'subcatID' SQL Injection

CVE-2007-0129—webappsasp

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

ThWboard 3.0b2.84-php5 - SQL Injection / Code Execution

CVE-2007-0340—webappsphp

SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightRO CMS 1.0 - 'index.php?projectid' SQL Injection

CVE-2007-0904—webappsphp

SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module debaser 0.92 - 'genre.php' Blind SQL Injection

CVE-2007-1805—webappsphp

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Phil-a-Form 1.2.0.0 - SQL Injection

CVE-2007-2933—webappsphp

SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! al

23RISCO

abrir ↗

Referência✓ VexDay Proof

PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection

CVE-2007-3584—webappsphp

SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection

CVE-2007-3809—webappsphp

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Remository - 'cat' SQL Injection

CVE-2007-4505—webappsphp

SQL injection vulnerability in index.php in the RemoSitory component (com_remository) for Mambo allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.