Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2023-4382

CVE-2023-4382LOW

tdevs Hyip Rio Profile Settings settings cross site scripting

28RISCO

abrir ↗

Referência

CVE-2016-3984

CVE-2016-3984—

The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0.

23RISCO

abrir ↗

Referência

CVE-2017-12969

CVE-2017-12969—

Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows r

28RISCO

abrir ↗

Referência

CVE-2021-35312

CVE-2021-35312—

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Serv

23RISCO

abrir ↗

Referência

CVE-2015-5466

CVE-2015-5466—

Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.10

23RISCO

abrir ↗

Referência

CVE-2024-7815

CVE-2024-7815MEDIUM

CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RD-Autos 1.5.5 - SQL Injection

CVE-2009-0420—webappsphp

SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-2709

CVE-2010-2709—

Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote at

50RISCO

abrir ↗

Referência✓ VexDay Proof

icblogger 2.0 - 'YID' SQL Injection

CVE-2006-4597—webappsasp

SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMesFilms 1.0 - 'index.php?id' SQL Injection

CVE-2009-0598—webappsphp

SQL injection vulnerability in index.php in PhpMesFilms 1.0 and 1.8 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Vision CMS 2.02 - SQL Injection / Remote Code Execution

CVE-2007-3214—webappsphp

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

vidshare pro - SQL Injection / Cross-Site Scripting

CVE-2009-1734—webappsphp

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Myspace Clone Script - SQL Injection

CVE-2007-5992—webappsphp

SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-5287

CVE-2010-5287—

SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2010-5287

CVE-2010-5287—

SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2012-5291

CVE-2012-5291—

SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2015-0179

CVE-2015-0179—

Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users t

23RISCO

abrir ↗

Referência

CVE-2008-4897

CVE-2008-4897—

SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência

CVE-2010-4784

CVE-2010-4784—

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_g

23RISCO

abrir ↗

Referência

CVE-2011-0443

CVE-2011-0443—

SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote a

23RISCO

abrir ↗

Referência

CVE-2012-1901

CVE-2012-1901—

Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hi

23RISCO

abrir ↗

Referência

CVE-2014-10032

CVE-2014-10032—

SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-2720

CVE-2010-2720—

SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-17018

CVE-2026-17018MEDIUM

CubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-17010

CVE-2026-17010MEDIUM

Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta

33RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'cat_id' SQL Injection

CVE-2008-2083—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

CVE-2011-5111

CVE-2011-5111—

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2015-4677

CVE-2015-4677—

Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

CVE-2008-4190—locallinux

The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitr

23RISCO

abrir ↗

Referência

CVE-2017-13236

CVE-2017-13236—

In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to loc

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.