Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2017-15962

CVE-2017-15962—

iStock Management System 1.0 allows Arbitrary File Upload via user/profile.

23RISCO

abrir ↗

Referência

CVE-2010-1047

CVE-2010-1047—

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCMS Portal Edition - 'id' SQL Injection

CVE-2008-3213—webappsphp

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2010-0945

CVE-2010-0945—

SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2010-0945

CVE-2010-0945—

SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2026-9582

CVE-2026-9582MEDIUM

SourceCodester CET Automated Grading System with AI Predictive Analytics cross-site request forgery

33RISCO

abrir ↗

Referência✓ VexDay Proof

Affiliate Directory - 'id' SQL Injection

CVE-2008-3719—webappsphp

SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4937

CVE-2010-4937—

Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2010-2674

CVE-2010-2674—

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2674

CVE-2010-2674—

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2255

CVE-2010-2255—

SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_a6mambohelpdesk' 18RC1 - Remote File Inclusion

CVE-2006-3930—webappsphp

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlie

23RISCO

abrir ↗

Referência✓ VexDay Proof

AstroSPACES 1.1.1 - 'id' SQL Injection

CVE-2008-4642—webappsphp

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2016-1794

CVE-2016-1794—

The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attack

23RISCO

abrir ↗

Referência

CVE-2016-1794

CVE-2016-1794—

The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jamit Job Board 3.x - Blind SQL Injection

CVE-2008-5295—webappsphp

SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Number Links 1 - 'id' SQL Injection

CVE-2008-5804—webappsphp

SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component PAX Gallery 0.1 - Blind SQL Injection

CVE-2008-5811—webappsphp

SQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Auction - Blind SQL Injection

CVE-2008-6778—webappsphp

SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Pub Site - SQL Injection

CVE-2008-6794—webappsphp

SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6883—webappsphp

SQL injection vulnerability in the Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPReferral 5.3 - 'AccountID' Blind SQL Injection

CVE-2008-6889—webappsasp

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2026-7862

CVE-2026-7862HIGH

Eupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation

41RISCO

abrir ↗

Referência

CVE-2026-44711

CVE-2026-44711HIGH

pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption

41RISCO

abrir ↗

Referência

CVE-2026-1402

CVE-2026-1402MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RISCO

abrir ↗

Referência

CVE-2010-3148

CVE-2010-3148—

Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse

28RISCO

abrir ↗

Referência

CVE-2016-1863

CVE-2016-1863—

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local user

23RISCO

abrir ↗

Referência

CVE-2010-4963

CVE-2010-4963—

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2026-38945

CVE-2026-38945HIGH

Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary cod

41RISCO

abrir ↗

Referência

CVE-2010-3149

CVE-2010-3149—

Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.