Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2017-17597

CVE-2017-17597—

Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17632

CVE-2017-17632—

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISCO

abrir ↗

Referência

CVE-2017-17633

CVE-2017-17633—

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php

23RISCO

abrir ↗

Referência

CVE-2017-17636

CVE-2017-17636—

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.

23RISCO

abrir ↗

Referência

CVE-2004-2502

CVE-2004-2502—

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the

23RISCO

abrir ↗

Referência

CVE-2017-17721

CVE-2017-17721—

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, ass

23RISCO

abrir ↗

Referência

CVE-2017-17737

CVE-2017-17737—

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diag

23RISCO

abrir ↗

Referência

CVE-2017-17738

CVE-2017-17738—

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Core - 'viewcat.php' SQL Injection

CVE-2007-1814—webappsphp

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Library - 'viewcat.php' SQL Injection

CVE-2007-1815—webappsphp

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Tutoriais - 'viewcat.php' SQL Injection

CVE-2007-1816—webappsphp

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MySpeach 3.0.7 - Local/Remote File Inclusion

CVE-2007-1896—webappsphp

Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to inclu

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBloggie 2.1.6 - Multiple SQL Injections

CVE-2007-1899—webappsphp

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2017-8594

CVE-2017-8594—

Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute

35RISCO

abrir ↗

Referência✓ VexDay Proof

Vizayn Urun Tanitim Sistemi 0.2 - 'tr' SQL Injection

CVE-2007-2803—webappsasp

SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ol BookMarks Manager 0.7.4 - 'root' Remote File Inclusion

CVE-2007-2816—webappsphp

Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP

28RISCO

abrir ↗

Referência

CVE-2017-17598

CVE-2017-17598—

Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.

23RISCO

abrir ↗

Referência

CVE-2021-35312

CVE-2021-35312—

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Serv

23RISCO

abrir ↗

Referência

CVE-2021-35323

CVE-2021-35323—

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

38RISCO

abrir ↗

Referência

CVE-2017-3106

CVE-2017-3106—

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fil

28RISCO

abrir ↗

Referência

CVE-2017-3195

CVE-2017-3195—

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack

28RISCO

abrir ↗

Referência

CVE-2026-14239

CVE-2026-14239HIGH

Tourmaster < 5.4.8 - Stored XSS via CSRF

41RISCO

abrir ↗

Referência

CVE-2017-3248

CVE-2017-3248—

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer 6 / Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow

CVE-2007-2938—remotewindows

Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6,

35RISCO

abrir ↗

Referência

CVE-2026-58478

CVE-2026-58478MEDIUM

Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

33RISCO

abrir ↗

Referência

CVE-2026-15622

CVE-2026-15622MEDIUM

poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization

33RISCO

abrir ↗

Referência

CVE-2026-15595

CVE-2026-15595MEDIUM

SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.