Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.107exploits catalogados

36.322CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.464Referência 22.936GitHub PoC 15.010VulnCheck XDB 8.846Nuclei 4.361Metasploit 3.490✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

zeeproperty - 'adid' SQL Injection

CVE-2008-4621—webappsphp

SQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SimpleBoard 1.1.0 - Remote File Inclusion

CVE-2006-3528—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Booking Manager 2.2 - 'id' SQL Injection

CVE-2008-5194—webappsphp

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Domain Seller Pro 1.5 - 'id' SQL Injection

CVE-2008-5788—webappsphp

SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

PozScripts Classified Ads Script - 'cid' SQL Injection

CVE-2008-3673—webappsphp

SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DELTAScripts PHP Classifieds 7.5 - Authentication Bypass

CVE-2008-5806—webappsphp

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

CVE-2008-3955—webappsphp

SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

TinyWebGallery 1.5 - 'image' Remote File Inclusion

CVE-2006-4166—webappsphp

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Auto Classifieds 1.4.3b - SQL Injection

CVE-2008-6656—webappsphp

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJchat 0.10 - 'unse' SQL Injection

CVE-2008-7210—webappsphp

directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

CVE-2007-3447—webappsphp

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog System 1.x - 'index.php?news_id' SQL Injection

CVE-2007-3979—webappsphp

SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component musepoes - 'aid' SQL Injection

CVE-2008-0579—webappsphp

SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProActive CMS - 'template' Local File Inclusion

CVE-2008-4187—webappsphp

Directory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência✓ VexDay Proof

icblogger 2.0 - 'YID' SQL Injection

CVE-2006-4597—webappsasp

SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component RD-Autos 1.5.5 - SQL Injection

CVE-2009-0420—webappsphp

SQL injection vulnerability in the RD-Autos (com_rdautos) 1.5.5 Stable component for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Vision CMS 2.02 - SQL Injection / Remote Code Execution

CVE-2007-3214—webappsphp

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Myspace Clone Script - SQL Injection

CVE-2007-5992—webappsphp

SQL injection vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

vidshare pro - SQL Injection / Cross-Site Scripting

CVE-2009-1734—webappsphp

SQL injection vulnerability in listing_video.php in VidSharePro allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Unreal Tournament 3 1.3 - Directory Traversal

CVE-2008-4243—remotewindows

Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tourna

23RISCO

abrir ↗

Referência✓ VexDay Proof

vbzoom 1.x - 'forum.php?MainID' SQL Injection

CVE-2006-3142—webappsphp

SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure

CVE-2006-3571—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7116—webappsphp

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Homepage M 1.0 - 'galerie.php' SQL Injection

CVE-2007-5308—webappsphp

SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection

CVE-2008-3185—webappsphp

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module PostSchedule 1.0 - 'eid' SQL Injection

CVE-2008-2012—webappsphp

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jadu CMS for Government - 'recruit_details.php' SQL Injection

CVE-2008-5988—webappsphp

SQL injection vulnerability in scripts/recruit_details.php in Jadu CMS for Government allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProQuiz 1.0 - Authentication Bypass

CVE-2008-6312—webappsphp

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Social Engine 3.06 - 'category_id' SQL Injection

CVE-2009-0400—webappsphp

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

ezcms 1.2 - Blind SQL Injection / Authentication Bypass

CVE-2008-2921—webappsphp

SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.