Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2014-10001

CVE-2014-10001—

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-10001

CVE-2014-10001—

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2018-11581

CVE-2018-11581—

Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2023-3184

CVE-2023-3184LOW

SourceCodester Sales Tracker Management System cross site scripting

28RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Reviews Script 1.0 - Arbitrary Delete User

CVE-2008-1783—webappsphp

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct reque

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix Jokes 2.0 - 'index.php?catid' SQL Injection

CVE-2007-1615—webappsphp

SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Meto Forum 1.1 - Multiple SQL Injections

CVE-2008-2448—webappsasp

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sisplet CMS 2008-01-24 - 'id' SQL Injection

CVE-2008-3026—webappsphp

SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS MAXSITE Component Guestbook - Remote Command Execution

CVE-2008-6446—webappsphp

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MauryCMS 0.53.2 - Arbitrary File Upload

CVE-2008-6952—webappsphp

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2024-36840

CVE-2024-36840CRITICAL

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code a

48RISCO

abrir ↗

Referência

CVE-2024-36840

CVE-2024-36840CRITICAL

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code a

48RISCO

abrir ↗

Referência

CVE-2009-2780

CVE-2009-2780—

Multiple cross-site scripting (XSS) vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2009-4433

CVE-2009-4433—

Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2014-3934

CVE-2014-3934—

SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-14821

CVE-2026-14821LOW

Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion

28RISCO

abrir ↗

Referência

CVE-2023-42628

CVE-2023-42628CRITICAL

Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay

48RISCO

abrir ↗

Referência

CVE-2023-42629

CVE-2023-42629CRITICAL

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87,

48RISCO

abrir ↗

Referência

CVE-2015-7889

CVE-2015-7889—

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f

23RISCO

abrir ↗

Referência

CVE-2015-7889

CVE-2015-7889—

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions f

23RISCO

abrir ↗

Referência

CVE-2017-16567

CVE-2017-16567—

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. T

23RISCO

abrir ↗

Referência

CVE-2015-5591

CVE-2015-5591—

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands.

23RISCO

abrir ↗

Referência

CVE-2018-10313

CVE-2018-10313—

WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m=member&f=index&v=profile&set

23RISCO

abrir ↗

Referência

CVE-2011-5222

CVE-2011-5222—

SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2024-25414

CVE-2024-25414CRITICAL

An arbitrary file upload vulnerability in /admin/upgrade of CSZ CMS v1.3.0 allows attackers to execute arbitrary code vi

48RISCO

abrir ↗

Referência

CVE-2013-3536

CVE-2013-3536—

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and ea

23RISCO

abrir ↗

Referência

CVE-2013-3536

CVE-2013-3536—

SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and ea

23RISCO

abrir ↗

Referência

CVE-2026-66730

CVE-2026-66730HIGH

facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.