Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência✓ VexDay Proof

tbdev 01-01-2008 - Multiple Vulnerabilities

CVE-2009-2138—webappsphp

Multiple open redirect vulnerabilities in TBDev.NET 01-01-08 allow remote attackers to redirect users to arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2009-4567

CVE-2009-4567—

Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated u

23RISCO

abrir ↗

Referência

CVE-2009-4567

CVE-2009-4567—

Multiple cross-site scripting (XSS) vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated u

23RISCO

abrir ↗

Referência

CVE-2008-5689

CVE-2008-5689—

tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDatingClub 3.7 - SQL Injection / Cross-Site Scripting Injection

CVE-2009-2178—webappsphp

Cross-site scripting (XSS) vulnerability in website.php in phpDatingClub 3.7 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4280

CVE-2010-4280—

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4282

CVE-2010-4282—

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute a

43RISCO

abrir ↗

Referência

CVE-2012-4240

CVE-2012-4240—

SQL injection vulnerability in modules/calendar/json.php in Group-Office community before 4.0.90 allows remote authentic

23RISCO

abrir ↗

Referência

CVE-2009-3348

CVE-2009-3348—

Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or

23RISCO

abrir ↗

Referência

CVE-2018-4863

CVE-2018-4863—

Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKE

23RISCO

abrir ↗

Referência

CVE-2009-3755

CVE-2009-3755—

Multiple cross-site scripting (XSS) vulnerabilities in phpBMS 0.96 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpWebSite 0.10.0-full - 'topics.php' SQL Injection

CVE-2006-0973—webappsphp

SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)

CVE-2006-3904—webappsphp

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

BrewBlogger 1.3.1 - 'printLog.php' SQL Injection

CVE-2006-5889—webappsphp

SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenLD 1.2.2 - 'index.php?id' SQL Injection

CVE-2007-3682—webappsphp

SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptCMS Lite 1.3 - Blind SQL Injection

CVE-2008-4524—webappsphp

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3

23RISCO

abrir ↗

Referência

CVE-2013-3729

CVE-2013-3729—

Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hija

23RISCO

abrir ↗

Referência

CVE-2009-4864

CVE-2009-4864—

Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scrip

23RISCO

abrir ↗

Referência

CVE-2013-5730

CVE-2013-5730—

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remot

23RISCO

abrir ↗

Referência

CVE-2020-29168

CVE-2020-29168CRITICAL

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitiv

48RISCO

abrir ↗

Referência

CVE-2009-2424

CVE-2009-2424—

Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2014-4194

CVE-2014-4194—

SQL injection vulnerability in zero_transact_article.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2014-5192

CVE-2014-5192—

SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinRAR 3.60 Beta 6 - SFX Path Stack Overflow

CVE-2006-3912—doswindows

Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinRAR 3.60 Beta 6 (French) - SFX Path Local Stack Overflow

CVE-2006-3912—localwindows

Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jupiter CMS 1.1.5 - 'Client-IP' SQL Injection

CVE-2007-0971—webappsphp

Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

HC Newssystem 1.0-1.4 - 'index.php?ID' SQL Injection

CVE-2007-1417—webappsphp

SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGameScript 1.7 - 'user' SQL Injection

CVE-2007-3646—webappsphp

SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ACG News 1.0 - 'aid'/'catid' SQL Injection

CVE-2007-4603—webappsphp

Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Motorola Wimax modem CPEi300 - File Disclosure / Cross-Site Scripting

CVE-2009-0393—remotehardware

Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated user

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.