Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2010-4517

CVE-2010-4517—

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2010-4566

CVE-2010-4566—

The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and

43RISCO

abrir ↗

Referência

CVE-2010-2610

CVE-2010-2610—

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4598

CVE-2010-4598—

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary f

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component garyscookbook 1.1.1 - SQL Injection

CVE-2008-1137—webappsphp

SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Calendar 4.1 - Blind SQL Injection

CVE-2008-1954—webappsphp

SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kolifa.net Download Script 1.2 - 'id' SQL Injection

CVE-2008-4054—webappsphp

SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1957—webappsphp

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

CVE-2008-4889—webappsphp

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pro Traffic One - 'poll_results.php' SQL Injection

CVE-2008-6214—webappsphp

SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-4604

CVE-2010-4604—

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in

23RISCO

abrir ↗

Referência

CVE-2010-4609

CVE-2010-4609—

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2007-5180

CVE-2007-5180—

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-4614

CVE-2010-4614—

SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2010-4615

CVE-2010-4615—

Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2026-4181

CVE-2026-4181CRITICAL

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-4184

CVE-2026-4184CRITICAL

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-4183

CVE-2026-4183CRITICAL

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISCO

abrir ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISCO

abrir ↗

Referência

CVE-2012-4877

CVE-2012-4877—

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remo

23RISCO

abrir ↗

Referência

CVE-2018-12904

CVE-2018-12904—

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause

23RISCO

abrir ↗

Referência

CVE-2008-4142

CVE-2008-4142—

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISCO

abrir ↗

Referência

CVE-2025-34099

CVE-2025-34099CRITICAL

VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

63RISCO

abrir ↗

Referência✓ VexDay Proof

YenerTurk Haber Script 1.0 - SQL Injection

CVE-2006-4064—webappsasp

SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yblog 0.2.2.2 - Cross-Site Scripting / SQL Injection

CVE-2008-2669—webappsphp

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-PHP CMS - 'article.php' SQL Injection

CVE-2008-4142—webappsphp

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4205—webappsphp

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetRisk 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-4887—webappsphp

SQL injection vulnerability in index.php in NetRisk 2.0 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.