Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2006-4318

CVE-2006-4318—

Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

50RISCO

abrir ↗

Referência

CVE-2021-47748

CVE-2021-47748CRITICAL

Hasura GraphQL 1.3.3 - Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2009-3252

CVE-2009-3252—

Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-13405

CVE-2018-13405—

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JooBlog 0.1.1 - Blind SQL Injection

CVE-2008-2630—webappsphp

SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Survey Poll - 'catid' SQL Injection

CVE-2008-3310—webappsasp

SQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Active Time Billing 3.2 - Authentication Bypass

CVE-2008-5632—webappsphp

SQL injection vulnerability in Account.asp in Active Time Billing 3.2 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

CFAGCMS 1 - SQL Injection

CVE-2008-5781—webappsphp

SQL injection vulnerability in right.php in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2009-5091

CVE-2009-5091—

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2023-27372

CVE-2023-27372CRITICAL

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

abrir ↗

Referência

CVE-2023-27372

CVE-2023-27372CRITICAL

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

abrir ↗

Referência

CVE-2023-27372

CVE-2023-27372CRITICAL

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

abrir ↗

Referência

CVE-2023-27372

CVE-2023-27372CRITICAL

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

85RISCO

abrir ↗

Referência

CVE-2010-4846

CVE-2010-4846—

SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-4845

CVE-2010-4845—

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2010-4829

CVE-2010-4829—

SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2013-1828

CVE-2013-1828—

The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size

23RISCO

abrir ↗

Referência

CVE-2025-9605

CVE-2025-9605CRITICAL

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2025-9523

CVE-2025-9523CRITICAL

Tenda AC1206 GetParentControlInfo stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2010-2911

CVE-2010-2911—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2911

CVE-2010-2911—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-1269

CVE-2010-1269—

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-1269

CVE-2010-1269—

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenSSL < 0.9.7l/0.9.8d - SSLv2 Client Crash

CVE-2006-4343—dosmultiple

The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier

28RISCO

abrir ↗

Referência

CVE-2009-2786

CVE-2009-2786—

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows

23RISCO

abrir ↗

Referência

CVE-2009-2585

CVE-2009-2585—

SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a m

23RISCO

abrir ↗

Referência

CVE-2010-4853

CVE-2010-4853—

SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-4853

CVE-2010-4853—

SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.