Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2023-1934

CVE-2023-1934CRITICAL

The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQL

48RISCO

Referência✓ VexDay Proof

YourFreeWorld Scrolling Text Ads - SQL Injection

CVE-2008-4885—webappsphp

SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arb

23RISCO

Referência

CVE-2014-9643

CVE-2014-9643—

K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users

23RISCO

Referência

CVE-2014-9643

CVE-2014-9643—

K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users

23RISCO

Referência

CVE-2012-4265

CVE-2012-4265—

SQL injection vulnerability in category_edit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL

23RISCO

Referência

CVE-2023-2246

CVE-2023-2246MEDIUM

SourceCodester Online Pizza Ordering System unrestricted upload

33RISCO

Referência

CVE-2015-7084

CVE-2015-7084—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

Referência

CVE-2017-14492

CVE-2017-14492—

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut

45RISCO

Referência

CVE-2010-4830

CVE-2010-4830—

SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r

23RISCO

Referência

CVE-2017-14618

CVE-2017-14618—

Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject

23RISCO

Referência

CVE-2010-4907

CVE-2010-4907—

Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrar

23RISCO

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

Referência✓ VexDay Proof

TAGWORX.CMS 3.00.02 - Multiple SQL Injections

CVE-2008-2394—webappsphp

Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands v

23RISCO

Referência

CVE-2009-3595

CVE-2009-3595—

SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

Referência

CVE-2023-23408

CVE-2023-23408MEDIUM

Azure Apache Ambari Spoofing Vulnerability

33RISCO

Referência

CVE-2009-3314

CVE-2009-3314—

SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL

23RISCO

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

Referência

CVE-2010-2910

CVE-2010-2910—

SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu

23RISCO

Referência

CVE-2017-6178

CVE-2017-6178—

The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call,

23RISCO

Referência

CVE-2017-14712

CVE-2017-14712—

In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

23RISCO

Referência

CVE-2010-2912

CVE-2010-2912—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

Referência

CVE-2010-2912

CVE-2010-2912—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

Referência✓ VexDay Proof

Jokes & Funny Pics Script - 'sb_jokeid' SQL Injection

CVE-2008-2874—webappsphp

SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitra

23RISCO

Referência✓ VexDay Proof

Camera Life 2.6.2 - 'id' SQL Injection

CVE-2008-3355—webappsphp

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL com

23RISCO

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - 'adid' SQL Injection

CVE-2008-3706—webappsphp

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

Referência✓ VexDay Proof

phpArcadeScript 4 - 'cat' SQL Injection

CVE-2008-3711—webappsphp

SQL injection vulnerability in index.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute a

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.