Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.226exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.126VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência✓ VexDay Proof

XOOPS Module Glossarie 1.7 - 'sid' SQL Injection

CVE-2007-2738—webappsphp

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection

CVE-2006-5140—webappsphp

SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote at

23RISCO

abrir ↗

Referência

CVE-2017-14219

CVE-2017-14219—

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre

23RISCO

abrir ↗

Referência

CVE-2022-4445

CVE-2022-4445CRITICAL

FL3R FeelBox <= 8.1 - Unauthenticated SQLi

48RISCO

abrir ↗

Referência

CVE-2013-4953

CVE-2013-4953—

SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2017-14355

CVE-2017-14355—

A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerability

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Simple Shop Galore 3.x - 'catid' SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component SimpleShop 3.4 - SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (1)

CVE-2008-3152—webappsphp

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (2)

CVE-2008-3152—webappsphp

SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Agent Zone - 'ann_id' SQL Injection

CVE-2008-3951—webappsphp

SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

CVE-2008-4335—webappsphp

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

CVE-2008-4335—webappsphp

SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

CVE-2008-4778—webappsphp

SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

DevelopItEasy News And Article System 1.4 - SQL Injection

CVE-2008-5131—webappsphp

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Web Host Directory - Authentication Bypass

CVE-2008-5650—webappsphp

SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)

CVE-2008-6498—remotewindows

Cross-site request forgery (CSRF) vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-20112

CVE-2010-20112CRITICAL

Amlibweb NetOpacs webquery.dll Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2010-20112

CVE-2010-20112CRITICAL

Amlibweb NetOpacs webquery.dll Stack Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2010-5039

CVE-2010-5039—

SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion

CVE-2006-4296—webappsphp

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allow

23RISCO

abrir ↗

Referência

CVE-2024-55879

CVE-2024-55879CRITICAL

XWiki allows RCE from script right in configurable sections

48RISCO

abrir ↗

Referência

CVE-2009-4719

CVE-2009-4719—

SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2011-4089

CVE-2011-4089—

The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary file

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

CVE-2007-1962—webappsphp

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

CVE-2007-3933—webappsphp

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2016-1720

CVE-2016-1720—

IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau

23RISCO

abrir ↗

Referência

CVE-2016-1720

CVE-2016-1720—

IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cau

23RISCO

abrir ↗

Referência

CVE-2021-47851

CVE-2021-47851CRITICAL

Mini Mouse 9.2.0 - Remote Code Execution

48RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate - 'fullnews.php?id' SQL Injection

CVE-2007-6462—webappsphp

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.