Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2010-4968

CVE-2010-4968—

SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2026-57951

CVE-2026-57951HIGH

Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table

41RISCO

abrir ↗

Referência

CVE-2026-13579

CVE-2026-13579MEDIUM

itsourcecode Hospital Management System patientchangepassword.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

JMweb - 'src' Local File Inclusion

CVE-2008-4522—webappsphp

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-4968

CVE-2010-4968—

SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component 1.0 for Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Blind SQL Injection

CVE-2008-4523—webappsphp

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2008-4525

CVE-2008-4525—

SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.01 - 'notes.php' Local File Inclusion

CVE-2008-4528—webappsphp

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

asiCMS alpha 0.208 - Multiple Remote File Inclusions

CVE-2008-4529—webappsphp

Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

CVE-2008-4569—webappsasp

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Real Estate Scripts 2008 - 'cat' SQL Injection

CVE-2008-4570—webappsphp

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fire Soft Board RC 3 - 'racine' Remote File Inclusion

CVE-2006-4716—webappsphp

PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2016-20078

CVE-2016-20078MEDIUM

WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php

33RISCO

abrir ↗

Referência

CVE-2016-20077

CVE-2016-20077MEDIUM

WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php

33RISCO

abrir ↗

Referência

CVE-2016-20076

CVE-2016-20076HIGH

WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download

41RISCO

abrir ↗

Referência

CVE-2016-20075

CVE-2016-20075HIGH

WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE

41RISCO

abrir ↗

Referência

CVE-2016-20074

CVE-2016-20074MEDIUM

WordPress Lazy Content Slider Plugin 3.4 CSRF

33RISCO

abrir ↗

Referência✓ VexDay Proof

GuildFTPd 0.999.8.11/0.999.14 - Heap Corruption (PoC) / Denial of Service

CVE-2008-4572—doswindows

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência

CVE-2010-4969

CVE-2010-4969—

SQL injection vulnerability in articlesdetails.php in BrotherScripts (BS) Business Directory allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

MunzurSoft Wep Portal W3 - 'kat' SQL Injection

CVE-2008-4573—webappsasp

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ayco Okul Portali - 'linkid' SQL Injection

CVE-2008-4574—webappsasp

SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method

CVE-2008-4583—remotewindows

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to over

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat Mail ActiveX 7.8 - 'ChilkatCert.dll' Insecure Method

CVE-2008-4584—remotewindows

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eserv 3.x - FTP Server (ABOR) Remote Stack Overflow (PoC)

CVE-2008-4588—doswindows

Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a deni

23RISCO

abrir ↗

Referência✓ VexDay Proof

Stash 1.0.3 - SQL Injection User Credentials Disclosure

CVE-2008-4590—webappsphp

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion

CVE-2008-4591—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion

CVE-2008-4592—webappsphp

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mosaic Commerce - 'cid' SQL Injection

CVE-2008-4599—webappsphp

SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 2.0 Alpha 1 - 'search.php' SQL Injection

CVE-2008-4603—webappsphp

SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

CafeEngine - Multiple SQL Injections

CVE-2008-4604—webappsphp

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.