Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência✓ VexDay Proof

Prozilla Webring Website Script - 'category.php?cat' SQL Injection

CVE-2007-4362—webappsphp

SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

IBM Rational ClearQuest - Web Authentication Bypass / SQL Injection

CVE-2007-4368—webappscgi

SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2017-8489

CVE-2017-8489—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2017-8491

CVE-2017-8491—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2017-8492

CVE-2017-8492—

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

abrir ↗

Referência

CVE-2017-8536

CVE-2017-8536—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

28RISCO

abrir ↗

Referência

CVE-2018-14485

CVE-2018-14485—

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RISCO

abrir ↗

Referência

CVE-2018-14728

CVE-2018-14728—

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

50RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft SQL Server - Distributed Management Objects Buffer Overflow

CVE-2007-4814—remotewindows

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.200

35RISCO

abrir ↗

Referência

CVE-2017-8841

CVE-2017-8841—

Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b30

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vantage Linguistics AnswerWorks 4 - API ActiveX Control Buffer Overflow

CVE-2007-6387—remotewindows

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Van

35RISCO

abrir ↗

Referência

CVE-2002-1230

CVE-2002-1230—

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute

23RISCO

abrir ↗

Referência

CVE-2017-8870

CVE-2017-8870—

Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

43RISCO

abrir ↗

Referência✓ VexDay Proof

WebED 0.8999a - Multiple Remote File Inclusions

CVE-2007-4815—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers

35RISCO

abrir ↗

Referência

CVE-2017-8917

CVE-2017-8917—

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RISCO

abrir ↗

Referência✓ VexDay Proof

BaoFeng2 - 'mps.dll' ActiveX Multiple Remote Buffer Overflows (PoC)

CVE-2007-4816—doswindows

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown imp

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpBlock a8.4 - 'PATH_TO_CODE' Remote File Inclusion

CVE-2008-1776—webappsphp

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote att

28RISCO

abrir ↗

Referência

CVE-2026-67599

CVE-2026-67599HIGH

ClearOS 7.9 OS Command Injection via Log Viewer filter parameter

41RISCO

abrir ↗

Referência

CVE-2018-10078

CVE-2018-10078—

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to i

23RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Forum Service - 'forum' SQL Injection

CVE-2008-1789—webappsphp

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2018-10079

CVE-2018-10079—

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users

23RISCO

abrir ↗

Referência

CVE-2018-10256

CVE-2018-10256—

A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile

23RISCO

abrir ↗

Referência

CVE-2018-10256

CVE-2018-10256—

A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privile

23RISCO

abrir ↗

Referência

CVE-2018-10259

CVE-2018-10259—

An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u

23RISCO

abrir ↗

Referência

CVE-2018-10259

CVE-2018-10259—

An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged u

23RISCO

abrir ↗

Referência

CVE-2018-10311

CVE-2018-10311—

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2018-10314

CVE-2018-10314—

Cross-site scripting (XSS) vulnerability in Open-AudIT Community 2.2.0 allows remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection

CVE-2008-2036—webappsphp

SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2026-14318

CVE-2026-14318MEDIUM

GiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template Settings

33RISCO

abrir ↗

Referência

CVE-2026-15235

CVE-2026-15235MEDIUM

Hotel Booking Lite < 6.0.4 - Subscriber+ Sensitive Data Disclosure via Admin Calendar AJAX Action

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.