Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2012-10026

CVE-2012-10026CRITICAL

WordPress Plugin Asset-Manager <= 2.0 PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2017-12930

CVE-2017-12930—

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users

23RISCO

abrir ↗

Referência

CVE-2010-4793

CVE-2010-4793—

SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-4793

CVE-2010-4793—

SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-3891

CVE-2010-3891—

Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind En

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog System 1.x - 'index.php?news_id' SQL Injection

CVE-2007-3979—webappsphp

SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2010-4794

CVE-2010-4794—

Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyWebGallery 1.5 - 'image' Remote File Inclusion

CVE-2006-4166—webappsphp

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2009-20006

CVE-2009-20006CRITICAL

osCommerce <= 2.2 Admin File Manager Arbitrary PHP Code Execution

63RISCO

abrir ↗

Referência

CVE-2022-46967

CVE-2022-46967CRITICAL

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admi

48RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component musepoes - 'aid' SQL Injection

CVE-2008-0579—webappsphp

SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

CVE-2008-3955—webappsphp

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-3396

CVE-2010-3396—

Buffer overflow in kavfm.sys in Kingsoft Antivirus 2010.04.26.648 and earlier allows local users to execute arbitrary co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine newdownlinebuilder - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Downline Goldmine paidversion - SQL Injection

CVE-2008-4178—webappsphp

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and D

23RISCO

abrir ↗

Referência✓ VexDay Proof

Creator CMS 5.0 - 'sideid' SQL Injection

CVE-2008-4377—webappsasp

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Auto Classifieds 1.4.3b - SQL Injection

CVE-2008-6656—webappsphp

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJchat 0.10 - 'unse' SQL Injection

CVE-2008-7210—webappsphp

directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuthPhp 1.0 - Authentication Bypass

CVE-2009-0738—webappsphp

SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2012-4258

CVE-2012-4258—

Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2019-9556

CVE-2019-9556—

FiberHome an5506-04-f RP2669 devices have XSS.

23RISCO

abrir ↗

Referência

CVE-2026-15381

CVE-2026-15381LOW

WP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filter

28RISCO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7116—webappsphp

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Homepage M 1.0 - 'galerie.php' SQL Injection

CVE-2007-5308—webappsphp

SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência

CVE-2012-4252

CVE-2012-4252—

Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the au

23RISCO

abrir ↗

Referência

CVE-2023-1478

CVE-2023-1478CRITICAL

Hummingbird < 3.4.2 - Unauthenticated Path Traversal

48RISCO

abrir ↗

Referência

CVE-2012-5000

CVE-2012-5000—

SQL injection vulnerability in jokes/index.php in the Witze addon 0.9 for deV!L'z Clanportal allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2716

CVE-2010-2716—

Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.