Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência✓ VexDay Proof

Powies MatchMaker 4.05 - 'matchdetail.php' SQL Injection

CVE-2006-6039—webappsphp

SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)

CVE-2006-7071—webappsphp

SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Repository - 'viewcat.php' SQL Injection

CVE-2007-1847—webappsphp

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2023-48902

CVE-2023-48902CRITICAL

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate priv

48RISCO

abrir ↗

Referência

CVE-2011-5099

CVE-2011-5099—

SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for

23RISCO

abrir ↗

Referência

CVE-2016-7633

CVE-2016-7633—

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory S

23RISCO

abrir ↗

Referência

CVE-2009-3504

CVE-2009-3504—

SQL injection vulnerability in offers_buy.php in Alibaba Clone 3.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2023-23305

CVE-2023-23305CRITICAL

The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading

48RISCO

abrir ↗

Referência

CVE-2012-1029

CVE-2012-1029—

SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2012-1029

CVE-2012-1029—

SQL injection vulnerability in mobile/search/index.php in Tube Ace (Adult PHP Tube Script) 1.6 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2024-8878

CVE-2024-8878CRITICAL

Unauthenticated Password Reset

48RISCO

abrir ↗

Referência

CVE-2010-4243

CVE-2010-4243—

fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repre

23RISCO

abrir ↗

Referência

CVE-2010-4249

CVE-2010-4249—

The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl

23RISCO

abrir ↗

Referência

CVE-2022-35156

CVE-2022-35156CRITICAL

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /

48RISCO

abrir ↗

Referência

CVE-2022-35156

CVE-2022-35156CRITICAL

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /

48RISCO

abrir ↗

Referência

CVE-2026-28292

CVE-2026-28292CRITICAL

simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key that enables RCE

48RISCO

abrir ↗

Referência

CVE-2009-4984

CVE-2009-4984—

Multiple cross-site scripting (XSS) vulnerabilities in Accessories Me PHP Affiliate Script 1.4 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2015-8434

CVE-2015-8434—

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

abrir ↗

Referência

CVE-2008-4046

CVE-2008-4046—

SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2013-6079

CVE-2013-6079—

Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic

23RISCO

abrir ↗

Referência

CVE-2013-6079

CVE-2013-6079—

Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic

23RISCO

abrir ↗

Referência

CVE-2013-6079

CVE-2013-6079—

Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'readarticle.php' SQL Injection

CVE-2008-4044—webappsphp

SQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

campus virtual-lms - Cross-Site Scripting / SQL Injection

CVE-2009-2149—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspWebLinks 2.0 - SQL Injection / Admin Pass Change

CVE-2006-2847—webappsasp

SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

bwired - 'index.php?newsID' SQL Injection

CVE-2007-3977—webappsphp

Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via un

23RISCO

abrir ↗

Referência

CVE-2020-20139

CVE-2020-20139—

Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoseRub 0.5.2 - Login SQL Injection

CVE-2007-6602—webappsphp

SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2013-3729

CVE-2013-3729—

Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hija

23RISCO

abrir ↗

Referência

CVE-2009-4864

CVE-2009-4864—

Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Scrip

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.