Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2017-17597

CVE-2017-17597—

Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Pizza - 'manufacturers_id' SQL Injection

CVE-2008-5046—webappsphp

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Rental Script - Authentication Bypass

CVE-2008-5047—webappsphp

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

CVE-2008-5049—localwindows

Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version

23RISCO

abrir ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17618

CVE-2017-17618—

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17618

CVE-2017-17618—

Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17620

CVE-2017-17620—

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod freshlinks - 'linkid' SQL Injection

CVE-2008-5074—webappsphp

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2017-17620

CVE-2017-17620—

Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Uploader Pro 1.0 - Multiple SQL Injections

CVE-2008-5075—webappsphp

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPKB 1.5 Professional - Multiple SQL Injections

CVE-2008-5088—webappsphp

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RISCO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Deterministic Network Enhancer - 'dne2000.sys' Kernel Ring0 SYSTEM

CVE-2008-5121—localwindows

dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Cli

23RISCO

abrir ↗

Referência

CVE-2017-17621

CVE-2017-17621—

Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATH_INFO to the /detail URI.

23RISCO

abrir ↗

Referência

CVE-2026-8293

CVE-2026-8293HIGH

Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip

41RISCO

abrir ↗

Referência

CVE-2026-10583

CVE-2026-10583MEDIUM

nextlevelbuilder GoClaw TTS Configuration Endpoint tts_config.go import server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-10568

CVE-2026-10568MEDIUM

itsourcecode Fees Management System manage_payment.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

MyServer 0.8.11 - '204 No Content' error Remote Denial of Service

CVE-2008-5160—doswindows

Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via mul

23RISCO

abrir ↗

Referência

CVE-2017-17622

CVE-2017-17622—

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Xe webtv - 'id' Blind SQL Injection

CVE-2008-5200—webappsphp

SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-17622

CVE-2017-17622—

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

23RISCO

abrir ↗

Referência

CVE-2026-10690

CVE-2026-10690MEDIUM

wonderwhy-er DesktopCommanderMCP read_file filesystem.ts readFileFromUrl server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2017-17622

CVE-2017-17622—

Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISCO

abrir ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)

CVE-2008-5409—doswindows

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGu

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.