Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-19923

CVE-2026-19923MEDIUM

code-projects Online Shopping System checkout_process.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-19922

CVE-2026-19922MEDIUM

code-projects Online Shopping System checkout.php cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke 0.764 - Blind SQL Injection

CVE-2008-1591—webappsphp

The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabl

23RISCO

abrir ↗

Referência

CVE-2026-19921

CVE-2026-19921MEDIUM

code-projects Online Shopping System homeaction.php sql injection

33RISCO

abrir ↗

Referência

CVE-2022-27925

CVE-2022-27925HIGHsob ataqueransomware

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISCO

abrir ↗

Referência

CVE-2024-12987

CVE-2024-12987MEDIUMsob ataque

DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection

100RISCO

abrir ↗

Referência

CVE-2023-20887

CVE-2023-20887CRITICALsob ataque

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware

100RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.5 - Multiple SQL Injections

CVE-2008-5841—webappsphp

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Plugin tinybrowser 1.5.12 - Arbitrary File Upload / Execution

CVE-2011-4908—webappsphp

TinyBrowser plugin for Joomla! before 1.5.13 allows arbitrary file upload via upload.php.

50RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1650—webappsphp

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prediction Football 1.x - 'matchid' SQL Injection

CVE-2008-1732—webappsphp

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2026-32834

CVE-2026-32834HIGH

Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning

41RISCO

abrir ↗

Referência

CVE-2011-5005

CVE-2011-5005—

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code b

23RISCO

abrir ↗

Referência

CVE-2026-7744

CVE-2026-7744MEDIUM

CodeAstro Online Classroom addnewstudent sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9702

CVE-2026-9702HIGH

InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking

41RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCart 1.1.1 - 'id' Blind SQL Injection

CVE-2008-1750—webappsphp

SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2016-10045

CVE-2016-10045—

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

60RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection

CVE-2008-1758—webappsphp

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2026-19904

CVE-2026-19904MEDIUM

SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting

33RISCO

abrir ↗

Referência

CVE-2020-14883

CVE-2020-14883HIGHsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

Referência

CVE-2026-19903

CVE-2026-19903MEDIUM

SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access

33RISCO

abrir ↗

Referência

CVE-2011-5043

CVE-2011-5043—

TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long strin

23RISCO

abrir ↗

Referência

CVE-2011-5164

CVE-2011-5164—

Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute ar

43RISCO

abrir ↗

Referência✓ VexDay Proof

Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download

CVE-2008-1770—remotewindows

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force

28RISCO

abrir ↗

Referência

CVE-2011-5173

CVE-2011-5173—

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service

23RISCO

abrir ↗

Referência

CVE-2026-19899

CVE-2026-19899MEDIUM

SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds 3.0 - 'index.php' SQL Injection

CVE-2008-1838—webappsphp

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2023-38831

CVE-2023-38831HIGHsob ataqueransomware

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

Referência✓ VexDay Proof

CDNetworks Nefficient Download - 'NeffyLauncher.dll' Code Execution

CVE-2008-1886—remotewindows

The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.