Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência✓ VexDay Proof

WSN Links Basic Edition - 'catid' SQL Injection

CVE-2007-3981—webappsphp

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6498—webappsasp

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Carbon Communities 2.4 - Multiple Vulnerabilities

CVE-2008-1895—webappsasp

Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPNuke < 1.8.8_8rc2 - 'artid' SQL Injection

CVE-2008-4092—webappsphp

SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Banner Exchange Website - 'targetid' SQL Injection

CVE-2008-6101—webappsphp

SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

CS-Cart 1.3.5 - Authentication Bypass

CVE-2008-6394—webappsphp

SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

ComicShout 2.8 - 'news_id' SQL Injection

CVE-2008-6425—webappsphp

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Calendar 4.1 - Blind SQL Injection

CVE-2008-1954—webappsphp

SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

TR News 2.1 - 'nb' SQL Injection

CVE-2008-1957—webappsphp

SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-2509

CVE-2010-2509—

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2016-3943

CVE-2016-3943—

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a

23RISCO

abrir ↗

Referência

CVE-2016-3943

CVE-2016-3943—

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a

23RISCO

abrir ↗

Referência

CVE-2010-4514

CVE-2010-4514—

Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-1336

CVE-2010-1336—

Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4517

CVE-2010-4517—

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2010-2610

CVE-2010-2610—

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kolifa.net Download Script 1.2 - 'id' SQL Injection

CVE-2008-4054—webappsphp

SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

CVE-2008-4889—webappsphp

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pro Traffic One - 'poll_results.php' SQL Injection

CVE-2008-6214—webappsphp

SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-2670

CVE-2010-2670—

SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2026-18721

CVE-2026-18721MEDIUM

kalcaddle kodbox SSO API Login apiLogin redirect

33RISCO

abrir ↗

Referência

CVE-2026-64827

CVE-2026-64827CRITICAL

Telenia TVox 26.5.3 Authentication Bypass via set_env.php

48RISCO

abrir ↗

Referência✓ VexDay Proof

MOTIONBORG Web Real Estate 2.1 - SQL Injection

CVE-2007-0196—webappsasp

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2009-4552

CVE-2009-4552—

Cross-site scripting (XSS) vulnerability in the Survey Pro module for Miniweb 2.0 allows remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2010-2700

CVE-2010-2700—

Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyFWB 1.0 - 'index.php' SQL Injection

CVE-2008-5097—webappsphp

SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-3420

CVE-2009-3420—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote at

23RISCO

abrir ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2007-3812

CVE-2007-3812—

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2014-7822

CVE-2014-7822—

The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restrictio

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.