Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2010-2460

CVE-2010-2460—

SQL injection vulnerability in merchant_product_list.php in JCE-Tech Shareasale Script (SASS) 1 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-6433

CVE-2026-6433HIGH

Custom CSS JS PHP <= 2.0.7 - Unauthenticated SQL Injection to RCE

56RISCO

abrir ↗

Referência

CVE-2014-0981

CVE-2014-0981—

VBox/GuestHost/OpenGL/util/net.c in Oracle VirtualBox before 3.2.22, 4.0.x before 4.0.24, 4.1.x before 4.1.32, 4.2.x bef

23RISCO

abrir ↗

Referência

CVE-2015-5996

CVE-2015-5996—

Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Links Management Application 1.0 - 'lcnt' SQL Injection

CVE-2007-1339—webappsphp

SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2012-3872

CVE-2012-3872—

Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Web Host Directory Script - 'host_id' SQL Injection

CVE-2008-2087—webappsphp

SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disabled

23RISCO

abrir ↗

Referência

CVE-2022-48079

CVE-2022-48079CRITICAL

Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execu

48RISCO

abrir ↗

Referência

CVE-2018-18435

CVE-2018-18435—

KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any

23RISCO

abrir ↗

Referência

CVE-2018-18435

CVE-2018-18435—

KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any

23RISCO

abrir ↗

Referência

CVE-2012-6585

CVE-2012-6585—

Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2012-6589

CVE-2012-6589—

Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2009-3805

CVE-2009-3805—

gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (applic

23RISCO

abrir ↗

Referência

CVE-2018-0438

CVE-2018-0438—

Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability

23RISCO

abrir ↗

Referência

CVE-2021-31650

CVE-2021-31650CRITICAL

A SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary S

48RISCO

abrir ↗

Referência

CVE-2010-2505

CVE-2010-2505—

Soft SaschArt SasCAM Webcam Server 2.6.5, 2.7, and earlier allows remote attackers to cause a denial of service (crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pars4U Videosharing 1.0 - Cross-Site Scripting / Blind SQL Injection

CVE-2008-3772—webappsphp

SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting

CVE-2020-29469—webappsphp

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dew-NewPHPLinks 2.0 - Local File Inclusion / Cross-Site Scripting

CVE-2009-1623—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2012-2573

CVE-2012-2573—

Multiple cross-site scripting (XSS) vulnerabilities in T-dah WebMail 3.2.0-2.3 allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2016-3653

CVE-2016-3653—

Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manager

23RISCO

abrir ↗

Referência

CVE-2018-13441

CVE-2018-13441—

qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows atta

23RISCO

abrir ↗

Referência

CVE-2015-1364

CVE-2015-1364—

SQL injection vulnerability in the getProfile function in system/profile.functions.php in Free Reprintables ArticleFR 3.

23RISCO

abrir ↗

Referência

CVE-2023-5347

CVE-2023-5347CRITICAL

Unauthenticated Firmware Upgrade

48RISCO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-3484

CVE-2010-3484—

SQL injection vulnerability in common.php in LightNEasy 3.2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-2038

CVE-2010-2038—

Cross-site scripting (XSS) vulnerability in include/tool/editing_files.php in gpEasy CMS 1.6.2 allows remote authenticat

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPNS 1.1 - 'shownews.php?id' SQL Injection

CVE-2007-4628—webappsphp

SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

SPBAS Business Automation Software 2012 - Multiple Vulnerabilities

CVE-2013-4665—webappsphp

SPBAS Business Automation Software 2012 has CSRF.

23RISCO

abrir ↗

Referência

CVE-2011-4806

CVE-2011-4806—

Multiple cross-site scripting (XSS) vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.