Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.303exploits catalogados

36.053CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.472VulnCheck XDB 8.813Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.697 exploits

Referência✓ VexDay Proof

ClickAuction - Authentication Bypass

CVE-2009-0297—webappsphp

SQL injection vulnerability in login_check.asp in ClickAuction allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2016-9091

CVE-2016-9091—

Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc

28RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.1 - Remote File Attachment / Local File Inclusion

CVE-2007-4886—webappsphp

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebSihirbazi 5.1.1 - 'pageid' SQL Injection

CVE-2007-6556—webappsphp

Multiple SQL injection vulnerabilities in websihirbazi 5.1.1 allow remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

CVE-2008-0802—webappsphp

SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Acajoom 1.1.5 - SQL Injection

CVE-2008-1427—webappsphp

SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote attac

23RISCO

abrir ↗

Referência

CVE-2017-15959

CVE-2017-15959—

Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-200

23RISCO

abrir ↗

Referência

CVE-2023-5241

CVE-2023-5241CRITICAL

AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file

48RISCO

abrir ↗

Referência

CVE-2014-9235

CVE-2014-9235—

Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated

23RISCO

abrir ↗

Referência

CVE-2015-5736

CVE-2015-5736—

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel

23RISCO

abrir ↗

Referência

CVE-2026-78177

CVE-2026-78177LOW

TanStack devtools-vite Development Devtools Event Bus package-manager.ts installPackage os command injection

28RISCO

abrir ↗

Referência

CVE-2010-2037

CVE-2010-2037—

Directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2026-78171

CVE-2026-78171MEDIUM

itsourcecode Sales and Inventory System processlogin.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion

CVE-2006-2361—webappsphp

PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as us

23RISCO

abrir ↗

Referência

CVE-2008-7000

CVE-2008-7000—

PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2015-5754

CVE-2015-5754—

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

CVE-2008-5860—webappsphp

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals is

23RISCO

abrir ↗

Referência

CVE-2017-8928

CVE-2017-8928—

mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.

23RISCO

abrir ↗

Referência

TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)

CVE-2022-30075—remotehardware

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote

35RISCO

abrir ↗

Referência

CVE-2012-1604

CVE-2012-1604—

Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML v

23RISCO

abrir ↗

Referência

CVE-2011-10011

CVE-2011-10011CRITICAL

WeBid 1.0.2 converter.php Remote PHP Code Injection

63RISCO

abrir ↗

Referência

CVE-2011-10011

CVE-2011-10011CRITICAL

WeBid 1.0.2 converter.php Remote PHP Code Injection

63RISCO

abrir ↗

Referência

CVE-2011-10011

CVE-2011-10011CRITICAL

WeBid 1.0.2 converter.php Remote PHP Code Injection

63RISCO

abrir ↗

Referência

CVE-2010-1855

CVE-2010-1855—

SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-1855

CVE-2010-1855—

SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2026-78145

CVE-2026-78145MEDIUM

CTFd __init__.py _is_safe_url redirect

33RISCO

abrir ↗

Referência

CVE-2012-4901

CVE-2012-4901—

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerClan 1.14a - Authentication Bypass

CVE-2009-0707—webappsphp

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2009-5102

CVE-2009-5102—

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2015-5754

CVE-2015-5754—

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 all

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.