Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2011-5113

CVE-2011-5113—

SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com_techfolio) component 1.0 for Joomla

23RISCO

abrir ↗

Referência

CVE-2008-3725

CVE-2008-3725—

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2923

CVE-2010-2923—

SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4996

CVE-2010-4996—

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2017-14311

CVE-2017-14311—

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402

23RISCO

abrir ↗

Referência

CVE-2024-6459

CVE-2024-6459CRITICAL

News Element Elementor Blog Magazine < 1.0.6 - Unauthenticated LFI

48RISCO

abrir ↗

Referência

CVE-2010-4736

CVE-2010-4736—

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4736

CVE-2010-4736—

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4737

CVE-2010-4737—

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2020-8512

CVE-2020-8512—

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

43RISCO

abrir ↗

Referência

CVE-2017-15580

CVE-2017-15580—

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly v

28RISCO

abrir ↗

Referência

CVE-2008-3750

CVE-2008-3750—

SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-1611

CVE-2010-1611—

Cross-site request forgery (CSRF) vulnerability in AlegroCart 1.1 allows remote attackers to hijack the authentication o

23RISCO

abrir ↗

Referência

CVE-2025-34329

CVE-2025-34329CRITICAL

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

48RISCO

abrir ↗

Referência

CVE-2025-34329

CVE-2025-34329CRITICAL

AudioCodes Fax/IVR Appliance <= 2.6.23 Unauthenticated Backup Upload RCE via ajaxBackupUploadFile.php

48RISCO

abrir ↗

Referência

CVE-2010-4855

CVE-2010-4855—

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4855

CVE-2010-4855—

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4904

CVE-2010-4904—

SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote att

23RISCO

abrir ↗

Referência

CVE-2017-16895

CVE-2017-16895—

The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper

23RISCO

abrir ↗

Referência✓ VexDay Proof

YourFreeWorld URL Rotator - SQL Injection

CVE-2008-3750—webappsphp

SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2017-15595

CVE-2017-15595—

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recu

23RISCO

abrir ↗

Referência

CVE-2018-11034

CVE-2018-11034—

In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of ser

23RISCO

abrir ↗

Referência

CVE-2015-2285

CVE-2015-2285—

The logrotation script (/etc/cron.daily/upstart) in the Ubuntu Upstart package before 1.13.2-0ubuntu9, as used in Ubuntu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kasseler CMS 1.1.0/1.2.0 Lite - SQL Injection

CVE-2008-4356—webappsphp

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZEEMATRI 3.0 - 'adid' SQL Injection

CVE-2008-5782—webappsphp

SQL injection vulnerability in bannerclick.php in ZeeMatri 3.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

taifajobs 1.0 - 'jobid' SQL Injection

CVE-2009-0727—webappsphp

SQL injection vulnerability in jobdetails.php in taifajobs 1.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ablespace 1.0 - Cross-Site Scripting / Blind SQL Injection

CVE-2009-1316—webappsphp

Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2020-8813

CVE-2020-8813—

graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.