Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Referência

CVE-2015-7047

CVE-2015-7047—

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Referência

CVE-2017-14492

CVE-2017-14492—

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut

45RISCO

abrir ↗

Referência✓ VexDay Proof

Eskolar CMS 0.9.0.0 - Blind SQL Injection

CVE-2006-3727—webappsphp

Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-4830

CVE-2010-4830—

SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (Metasploit) (1)

CVE-2006-3730HIGHremotewindows

Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service

68RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_videodb 0.3en - Remote File Inclusion

CVE-2006-3736—webappsphp

PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier

23RISCO

abrir ↗

Referência

CVE-2010-4907

CVE-2010-4907—

Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

abrir ↗

Referência

CVE-2009-3595

CVE-2009-3595—

SQL injection vulnerability in results.php in VS PANEL 7.5.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2023-23408

CVE-2023-23408MEDIUM

Azure Apache Ambari Spoofing Vulnerability

33RISCO

abrir ↗

Referência

CVE-2009-3314

CVE-2009-3314—

SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Online Store 1 - 'cat_id' SQL Injection

CVE-2008-5802—webappsphp

SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2017-14627

CVE-2017-14627—

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au

43RISCO

abrir ↗

Referência

CVE-2010-2910

CVE-2010-2910—

SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2017-6178

CVE-2017-6178—

The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call,

23RISCO

abrir ↗

Referência

CVE-2010-2912

CVE-2010-2912—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2912

CVE-2010-2912—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Online Store 1 - Authentication Bypass

CVE-2008-5803—webappsphp

SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2 - 'id' SQL Injection

CVE-2008-3355—webappsphp

SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways ZeeJobsite 2.0 - 'adid' SQL Injection

CVE-2008-3706—webappsphp

SQL injection vulnerability in bannerclick.php in ZEEJOBSITE 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ HotScripts-like Site - 'cid' SQL Injection

CVE-2008-6243—webappsphp

SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection

CVE-2008-4202—webappsphp

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MyContent 1.1.13 - Blind SQL Injection

CVE-2008-6430—webappsphp

SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

CJ Ultra Plus 1.0.4 - Cookie SQL Injection

CVE-2008-4241—webappsphp

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drinks Complete Website 2.1.0 - 'drinkid' SQL Injection

CVE-2008-5169—webappsphp

SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Webshop 1.02 - Authentication Bypass

CVE-2008-6627—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Dir Submit - Authentication Bypass

CVE-2009-1787—webappsphp

Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attack

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.