Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.214exploits catalogados

36.016CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.449VulnCheck XDB 8.773Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2010-2682

CVE-2010-2682—

Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote a

43RISCO

abrir ↗

Referência

CVE-2016-0846

CVE-2016-0846—

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.

23RISCO

abrir ↗

Referência✓ VexDay Proof

See-Commerce 1.0.625 - 'owimg.php3' Remote File Inclusion

CVE-2006-4121—webappsphp

PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

CVE-2006-6873—webappsphp

Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection

CVE-2007-1166—webappsphp

SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2008-4172

CVE-2008-4172—

SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

runawaysoft haber portal 1.0 - 'tr' Multiple Vulnerabilities

CVE-2007-2752—webappsasp

SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

NMDeluxe 2.0.0 - 'id' SQL Injection

CVE-2007-4645—webappsphp

SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCMS 3.1 Demo - SQL Injection

CVE-2007-6658—webappsphp

SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-0964

CVE-2010-0964—

SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2010-0964

CVE-2010-0964—

SQL injection vulnerability in start.php in Eros Webkatalog allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2008-3125

CVE-2008-3125—

SQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-0980

CVE-2010-0980—

SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

PozScripts Classified Ads Script - 'cid' SQL Injection

CVE-2008-3673—webappsphp

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DELTAScripts PHP Classifieds 7.5 - Authentication Bypass

CVE-2008-5806—webappsphp

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2012-5098

CVE-2012-5098—

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-0800

CVE-2010-0800—

SQL injection vulnerability in the Ossolution Team Documents Seller (aka DMS) (com_dms) component 2.5.1 for Joomla! allo

23RISCO

abrir ↗

Referência

CVE-2016-1000

CVE-2016-1000—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows

28RISCO

abrir ↗

Referência

CVE-2016-8641

CVE-2016-8641MEDIUM

A privilege escalation vulnerability was found in nagios 4.2.x that occurs in daemon-init.in when creating necessary fil

33RISCO

abrir ↗

Referência

CVE-2010-1716

CVE-2010-1716—

SQL injection vulnerability in the Agenda Address Book (com_agenda) component 1.0.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2624

CVE-2010-2624—

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2022-46966

CVE-2022-46966CRITICAL

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.

48RISCO

abrir ↗

Referência

CVE-2010-2719

CVE-2010-2719—

SQL injection vulnerability in show.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to

23RISCO

abrir ↗

Referência

PHPJabbers Appointment Scheduler 2.3 - Reflected XSS (Cross-Site Scripting)

CVE-2020-35416—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi

23RISCO

abrir ↗

Referência

CVE-2026-14860

CVE-2026-14860MEDIUM

Podcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery

33RISCO

abrir ↗

Referência

CVE-2026-14206

CVE-2026-14206HIGH

HT Contact Form < 2.9.3 - Unauthenticated Saved Form Draft Data Disclosure

41RISCO

abrir ↗

Referência

CVE-2018-6757

CVE-2018-6757HIGH

True Key (TK) Windows Client - Privilege Escalation vulnerability

41RISCO

abrir ↗

Referência

CVE-2012-10033

CVE-2012-10033CRITICAL

Narcissus backend.php Image Configuration Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10033

CVE-2012-10033CRITICAL

Narcissus backend.php Image Configuration Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10033

CVE-2012-10033CRITICAL

Narcissus backend.php Image Configuration Command Injection

63RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.