Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - 'catid' SQL Injection

CVE-2008-6622—webappsphp

SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass

CVE-2008-6624—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MercuryBoard 1.1.5 - 'login.php' Blind SQL Injection

CVE-2008-6632—webappsphp

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - 'idresa' SQL Injection

CVE-2008-6633—webappsphp

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idre

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - Multiple SQL Injections

CVE-2008-6634—webappsphp

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idro

23RISCO

abrir ↗

Referência

CVE-2026-13552

CVE-2026-13552MEDIUM

itsourcecode Online Hotel Management System controller.php edit sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13551

CVE-2026-13551MEDIUM

itsourcecode Baptism Information Management System editBaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13550

CVE-2026-13550MEDIUM

itsourcecode Baptism Information Management System delbaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13548

CVE-2026-13548MEDIUM

itsourcecode Hospital Management System doctortimings.php sql injection

33RISCO

abrir ↗

Referência

CVE-2010-4282

CVE-2010-4282—

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute a

43RISCO

abrir ↗

Referência✓ VexDay Proof

Ktools Photostore 3.5.2 - Multiple SQL Injections

CVE-2008-6648—webappsphp

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

miniBloggie 1.0 - 'del.php' Arbitrary Delete Post

CVE-2008-6650—webappsphp

del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_i

23RISCO

abrir ↗

Referência✓ VexDay Proof

OxYProject 0.85 - 'edithistory.php' Remote Code Execution

CVE-2008-6651—webappsphp

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2016-20079

CVE-2016-20079MEDIUM

WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php

33RISCO

abrir ↗

Referência

CVE-2010-4347

CVE-2010-4347—

The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which a

23RISCO

abrir ↗

Referência

CVE-2010-4356

CVE-2010-4356—

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-4356

CVE-2010-4356—

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction - 'profile.php' SQL Injection (1)

CVE-2008-6663—webappsphp

SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

nweb2fax 0.2.7 - Multiple Vulnerabilities

CVE-2008-6669—webappsphp

viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in t

23RISCO

abrir ↗

Referência

CVE-2026-7121

CVE-2026-7121CRITICAL

Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2010-4365

CVE-2010-4365—

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2010-4365

CVE-2010-4365—

SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2010-4366

CVE-2010-4366—

Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote a

23RISCO

abrir ↗

Referência

CVE-2010-5016

CVE-2010-5016—

SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Real Estate Listings - Authentication Bypass

CVE-2008-6796—webappsphp

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Real Estate Listings - Arbitrary File Upload

CVE-2008-6798—webappsphp

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.9a (Beta) - Insecure Cookie Handling

CVE-2008-6804—webappsphp

Tribiq CMS 5.0.9a beta allows remote attackers to bypass authentication and gain administrative access by setting the CO

23RISCO

abrir ↗

Referência✓ VexDay Proof

7Shop 1.1 - Arbitrary File Upload

CVE-2008-6806—webappsphp

Unrestricted file upload vulnerability in includes/imageupload.php in 7Shop 1.1 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2017-8656

CVE-2017-8656—

Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

35RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Link Directory - 'cat_id' SQL Injection

CVE-2008-6808—webappsphp

SQL injection vulnerability in links.php in Scripts for Sites (SFS) EZ Link Directory allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.