Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2015-6962

CVE-2015-6962—

SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2010-3271

CVE-2010-3271—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative conso

23RISCO

abrir ↗

Referência

CVE-2010-4939

CVE-2010-4939—

PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência

CVE-2010-4878

CVE-2010-4878—

PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2009-4661

CVE-2009-4661—

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial o

23RISCO

abrir ↗

Referência

CVE-2015-5529

CVE-2015-5529—

Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

CVE-2008-3209—doswindows

Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remot

23RISCO

abrir ↗

Referência

CVE-2010-3138

CVE-2010-3138—

Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Alstrasoft Affiliate Network Pro - 'pgm' SQL Injection

CVE-2008-3240—webappsphp

SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

sourdough 0.3.5 - Remote File Inclusion

CVE-2009-0456—webappsphp

PHP remote file inclusion vulnerability in examples/example_clientside_javascript.php in patForms, as used in Sourdough

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thickbox Gallery 2 - 'index.php' Local File Inclusion

CVE-2009-1625—webappsphp

Directory traversal vulnerability in index.php in Thickbox Gallery 2 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência

CVE-2026-15475

CVE-2026-15475MEDIUM

MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control

33RISCO

abrir ↗

Referência

CVE-2026-9604

CVE-2026-9604MEDIUM

JeecgBoot AiragModelController access control

33RISCO

abrir ↗

Referência

CVE-2022-0316

CVE-2022-0316CRITICAL

Multiple themes - Unauthenticated Arbitrary File Upload

48RISCO

abrir ↗

Referência

CVE-2026-9603

CVE-2026-9603MEDIUM

SourceCodester eDoc Doctor Appointment System delete-session.php authorization

33RISCO

abrir ↗

Referência

CVE-2014-125115

CVE-2014-125115CRITICAL

Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

63RISCO

abrir ↗

Referência

CVE-2014-125115

CVE-2014-125115CRITICAL

Pandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Cheat Script 2.0 - 'id' SQL Injection

CVE-2008-1863—webappsphp

SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2026-8472

CVE-2026-8472MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2015-5540

CVE-2015-5540—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu

35RISCO

abrir ↗

Referência

CVE-2026-9271

CVE-2026-9271MEDIUM

KeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSS

33RISCO

abrir ↗

Referência

CVE-2014-3935

CVE-2014-3935—

SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2025-5630

CVE-2025-5630CRITICAL

D-Link DIR-816 form2lansetup.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2009-3665

CVE-2009-3665—

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-20472

CVE-2018-20472—

An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. The logs web interface is vulnerable to stored XSS.

23RISCO

abrir ↗

Referência

CVE-2014-2081

CVE-2014-2081—

Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua bef

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultrastats 0.2.142 - 'players-detail.php' Blind SQL Injection

CVE-2008-3241—webappsphp

SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Portal - Multiple SQL Injections

CVE-2008-5605—webappsasp

Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

CVE-2008-5739—webappsphp

SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

k-rate - SQL Injection / Cross-Site Scripting

CVE-2008-7097—webappsphp

Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.