Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência✓ VexDay Proof

Scribe 0.2 - 'index.php' Local File Inclusion

CVE-2008-0822—webappsphp

Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a

23RISCO

abrir ↗

Referência

CVE-2010-2028

CVE-2010-2028—

Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência

qdPM 9.2 - Cross-site Request Forgery (CSRF)

CVE-2022-26180—webappsphp

qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.

23RISCO

abrir ↗

Referência

CVE-2010-2028

CVE-2010-2028—

Buffer overflow in k23productions TFTPUtil GUI (aka TFTPGUI) 1.4.5 allows remote attackers to cause a denial of service

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections

CVE-2008-2857—webappsphp

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AyeView 2.20 - '.GIF' Image Local Crash

CVE-2008-5884—doswindows

AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malfo

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-6193—webappsphp

Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain se

23RISCO

abrir ↗

Referência✓ VexDay Proof

living Local 1.1 - Cross-Site Scripting / Arbitrary File Upload

CVE-2008-6530—webappsphp

Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated adm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1677—webappsphp

Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Grades & Attendance 3.2.6 - Multiple Local File Inclusions

CVE-2009-2037—webappsphp

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when r

23RISCO

abrir ↗

Referência

CVE-2014-4741

CVE-2014-4741—

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2014-9242

CVE-2014-9242—

SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2011-4026

CVE-2011-4026—

SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2023-31903

CVE-2023-31903CRITICAL

GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by u

48RISCO

abrir ↗

Referência

CVE-2020-17382

CVE-2020-17382—

The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).

23RISCO

abrir ↗

Referência

CVE-2013-7043

CVE-2013-7043—

Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4886—webappsphp

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyData Pro 2.2.2 - 'index.php' SQL Injection

CVE-2006-5707—webappsphp

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSihirbazi 5.1.1 - 'pageid' SQL Injection

CVE-2007-6556—webappsphp

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

CVE-2008-0802—webappsphp

SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2016-9091

CVE-2016-9091—

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Acajoom 1.1.5 - SQL Injection

CVE-2008-1427—webappsphp

SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3301—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

bilboblog 2.1 - Multiple Vulnerabilities

CVE-2008-3302—webappsphp

SQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is disabled, allows remote aut

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClickAuction - Authentication Bypass

CVE-2009-0297—webappsphp

SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2017-15959

CVE-2017-15959—

Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-200

23RISCO

abrir ↗

Referência

CVE-2023-5241

CVE-2023-5241CRITICAL

AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file

48RISCO

abrir ↗

Referência

CVE-2014-9235

CVE-2014-9235—

Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated

23RISCO

abrir ↗

Referência

CVE-2016-9299

CVE-2016-9299—

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

60RISCO

abrir ↗

Referência

CVE-2010-2037

CVE-2010-2037—

Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! a

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.