Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

celerbb 0.0.2 - Multiple Vulnerabilities

CVE-2009-0851—webappsphp

Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection

CVE-2007-1807—webappsphp

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

CVE-2007-2902—webappsphp

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elkagroup Image Gallery 1.0 - SQL Injection

CVE-2007-3461—webappsphp

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP123 Top Sites - 'category.php?cat' SQL Injection

CVE-2007-4054—webappsphp

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog:CMS 4.2.1b - SQL Injection / Cross-Site Scripting

CVE-2008-0360—webappsphp

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_doc - SQL Injection

CVE-2008-0772—webappsphp

SQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module EasyContent - 'page_id' SQL Injection

CVE-2008-0880—webappsphp

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Simple Shop Galore 3.x - 'catid' SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix FAQ Builder 2.0 - 'index.php' SQL Injection

CVE-2007-1618—webappsphp

SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Agent Zone - 'ann_id' SQL Injection

CVE-2008-3951—webappsphp

SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Glossarie 1.7 - 'sid' SQL Injection

CVE-2007-2738—webappsphp

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

CVE-2008-4778—webappsphp

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

DevelopItEasy News And Article System 1.4 - SQL Injection

CVE-2008-5131—webappsphp

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Web Host Directory - Authentication Bypass

CVE-2008-5650—webappsphp

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

CVE-2008-6498—remotewindows

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnFlashGames 2.5 - SQL Injection

CVE-2008-2013—webappsphp

SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module HTMLArea3 1.5 - Remote File Inclusion

CVE-2006-3751—webappsphp

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_html

23RISCO

abrir ↗

Referência✓ VexDay Proof

NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution

CVE-2008-4342—remotewindows

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used

28RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

CVE-2007-1962—webappsphp

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

eReservations - Authentication Bypass

CVE-2009-0252—webappsasp

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

CVE-2007-3933—webappsphp

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

CVE-2009-1229—webappsphp

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the u

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate - 'fullnews.php?id' SQL Injection

CVE-2007-6462—webappsphp

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'Cuid' cookie Blind SQL Injection

CVE-2008-0734—webappsphp

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)

CVE-2007-0388—webappsphp

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution

CVE-2007-2000—webappsphp

Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

BluSky CMS - 'news_id' SQL Injection

CVE-2009-1548—webappsphp

SQL injection vulnerability in index.php in BluSky CMS allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.