Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2019-11409

CVE-2019-11409—

app/operator_panel/exec.php in the Operator Panel module in FusionPBX 4.4.3 suffers from a command injection vulnerabili

60RISCO

abrir ↗

Referência

CVE-2018-0777

CVE-2018-0777—

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra

35RISCO

abrir ↗

Referência✓ VexDay Proof

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

CVE-2008-2835—webappsphp

SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

traindepot 0.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2838—webappsphp

Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine Category Addon - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Devalcms 1.4a - Cross-Site Scripting / Remote Code Execution

CVE-2008-6983—webappsphp

modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Site Lock 2.0 - 'index.php' SQL Injection

CVE-2008-2865—webappsphp

SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection

CVE-2008-2866—webappsphp

SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection

CVE-2008-2867—webappsphp

SQL injection vulnerability in adclick.php in E-topbiz Viral DX 1 2.07 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência

CVE-2019-11358

CVE-2019-11358—

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

Referência✓ VexDay Proof

DUcalendar 1.0 - 'iEve' SQL Injection

CVE-2008-2868—webappsasp

SQL injection vulnerability in detail.asp in DUware DUcalendar 1.0 and possibly earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link ADS 1 - 'linkid' SQL Injection

CVE-2008-2869—webappsphp

SQL injection vulnerability in out.php in E-topbiz Link ADS 1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

ShareCMS 0.1 - Multiple SQL Injections

CVE-2008-2870—webappsphp

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2022-31706

CVE-2022-31706CRITICAL

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi

85RISCO

abrir ↗

Referência

CVE-2022-31706

CVE-2022-31706CRITICAL

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi

85RISCO

abrir ↗

Referência✓ VexDay Proof

shibby shop 2.2 - Multiple Vulnerabilities

CVE-2008-2873—webappsphp

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Classmate Script - 'viewprofile.php' SQL Injection

CVE-2008-4375—webappsphp

SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live TV Script - 'index.php?mid' SQL Injection

CVE-2008-4376—webappsphp

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Natterchat 1.1 - Authentication Bypass

CVE-2008-7049—webappsphp

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2021-32305

CVE-2021-32305—

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet

60RISCO

abrir ↗

Referência

CVE-2026-7113

CVE-2026-7113MEDIUM

NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-7112

CVE-2026-7112MEDIUM

NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-7110

CVE-2026-7110MEDIUM

code-projects Invoice System in Laravel item cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7109

CVE-2026-7109MEDIUM

code-projects Invoice System in Laravel API Endpoint item improper authorization

33RISCO

abrir ↗

Referência

CVE-2009-2326

CVE-2009-2326—

Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-1999002

CVE-2018-1999002—

A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framewor

45RISCO

abrir ↗

Referência

CVE-2020-10915

CVE-2020-10915CRITICAL

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.

85RISCO

abrir ↗

Referência

CVE-2022-31814

CVE-2022-31814CRITICAL

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metachar

85RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.