Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2018-6936

CVE-2018-6936—

Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.

23RISCO

abrir ↗

Referência

CVE-2016-4534

CVE-2016-4534—

The McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 (8.8.0.1546) on W

23RISCO

abrir ↗

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2014-10001

CVE-2014-10001—

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2014-10001

CVE-2014-10001—

Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2015-4878

CVE-2015-4878—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2018-11581

CVE-2018-11581—

Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2023-3184

CVE-2023-3184LOW

SourceCodester Sales Tracker Management System cross site scripting

28RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Reviews Script 1.0 - Arbitrary Delete User

CVE-2008-1783—webappsphp

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct reque

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix Jokes 2.0 - 'index.php?catid' SQL Injection

CVE-2007-1615—webappsphp

SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Meto Forum 1.1 - Multiple SQL Injections

CVE-2008-2448—webappsasp

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sisplet CMS 2008-01-24 - 'id' SQL Injection

CVE-2008-3026—webappsphp

SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS MAXSITE Component Guestbook - Remote Command Execution

CVE-2008-6446—webappsphp

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MauryCMS 0.53.2 - Arbitrary File Upload

CVE-2008-6952—webappsphp

SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2009-2337

CVE-2009-2337—

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when mag

23RISCO

abrir ↗

Referência

CVE-2011-5218

CVE-2011-5218—

SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2019-2721

CVE-2019-2721—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions th

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

CVE-2008-2028—webappsphp

miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via

23RISCO

abrir ↗

Referência

CVE-2009-2606

CVE-2009-2606—

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows rem

23RISCO

abrir ↗

Referência

CVE-2009-2602

CVE-2009-2602—

R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, whi

23RISCO

abrir ↗

Referência

CVE-2018-25427

CVE-2018-25427CRITICAL

Arm Whois 3.11 Buffer Overflow via SEH Overwrite

48RISCO

abrir ↗

Referência

CVE-2015-5119

CVE-2015-5119HIGHsob ataque

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISCO

abrir ↗

Referência

CVE-2009-4545

CVE-2009-4545—

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência

CVE-2022-47870

CVE-2022-47870MEDIUM

A Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows r

33RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'sql.php' Remote File Inclusion

CVE-2006-2142—webappsphp

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-0725

CVE-2010-0725—

Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-0725

CVE-2010-0725—

Cross-site scripting (XSS) vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2026-49952

CVE-2026-49952CRITICAL

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

63RISCO

abrir ↗

Referência✓ VexDay Proof

XPOZE Pro 3.06 - 'uid' SQL Injection

CVE-2008-3089—webappsphp

SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion

CVE-2006-6255—webappsphp

Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.