Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência✓ VexDay Proof

PozScripts Classified Auctions - 'gotourl.php?id' SQL Injection

CVE-2008-4755—webappsphp

SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2008-1336

CVE-2008-1336—

SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2016-0051

CVE-2016-0051—

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window

43RISCO

abrir ↗

Referência✓ VexDay Proof

ActiveVotes 2.2 - 'AccountID' Blind SQL Injection

CVE-2008-5365—webappsasp

SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Poll Pro 2.0 - Authentication Bypass

CVE-2008-5573—webappsasp

SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Randshop 1.1.1 - 'header.inc.php' Remote File Inclusion

CVE-2006-3375—webappsphp

PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow

CVE-2006-3400—doswindows

Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)

23RISCO

abrir ↗

Referência✓ VexDay Proof

WonderEdit Pro CMS (template_path) - Remote File Inclusion

CVE-2006-3422—webappsphp

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyRealty 1.0.x - 'search.php' SQL Injection

CVE-2007-6472—webappsphp

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Quran 1.1 - 'surano' SQL Injection

CVE-2008-0832—webappsphp

SQL injection vulnerability in index.php in the Kemas Antonius com_quran 1.1 and earlier component for Mambo and Joomla!

23RISCO

abrir ↗

Referência

Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure

CVE-2020-25988—remotehardware

UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action 'X_GetAccess' wh

23RISCO

abrir ↗

Referência

CVE-2010-1600

CVE-2010-1600—

SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection

CVE-2008-5772—webappsasp

Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-1493

CVE-2010-1493—

SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-1493

CVE-2010-1493—

SQL injection vulnerability in the AWDwall (com_awdwall) component before 1.5.5 for Joomla! allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2008-3749

CVE-2008-3749—

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2026-19757

CVE-2026-19757MEDIUM

Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal

33RISCO

abrir ↗

Referência

CVE-2008-5493

CVE-2008-5493—

SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-0981

CVE-2010-0981—

SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-0981

CVE-2010-0981—

SQL injection vulnerability in the TPJobs (com_tpjobs) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-0614

CVE-2010-0614—

SQL injection vulnerability in ajax.php in evalSMSI 2.1.03 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-0671

CVE-2010-0671—

SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-0671

CVE-2010-0671—

SQL injection vulnerability in index.php in KR MEDIA Pogodny CMS allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4902

CVE-2010-4902—

Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-4503

CVE-2010-4503—

SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2020-27533

CVE-2020-27533—

A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kolifa.net Download Script 1.2 - 'id' SQL Injection

CVE-2008-4054—webappsphp

SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

CVE-2008-4889—webappsphp

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2010-2509

CVE-2010-2509—

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.