Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados

39.531CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentes populares risco

25.447 exploits

Referência

CVE-2004-1722

CVE-2004-1722—

SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

wavewoo 0.1.1 - 'loading.php?path_include' Remote File Inclusion

CVE-2007-2273—webappsphp

PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-5044

CVE-2010-5044—

SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remot

23RISCO

abrir ↗

Referência

CVE-2019-15081

CVE-2019-15081—

OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing fe

23RISCO

abrir ↗

Referência

CVE-2020-11651

CVE-2020-11651CRITICALsob ataque

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

abrir ↗

Referência✓ VexDay Proof

minb 0.1.0 - Remote Code Execution

CVE-2008-7005—webappsphp

include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência

CVE-2026-23760

CVE-2026-23760CRITICALsob ataqueransomware

SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

100RISCO

abrir ↗

Referência

CVE-2008-7008

CVE-2008-7008—

HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a d

23RISCO

abrir ↗

Referência✓ VexDay Proof

Chilkat IMAP ActiveX 7.9 - File Execution / Denial of Service

CVE-2008-7022—remotewindows

Insecure method vulnerability in ChilkatMail_v7_9.dll in the Chilkat Software IMAP ActiveX control (ChilkatMail2.Chilkat

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

CVE-2007-2424—webappsphp

PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2026-10236

CVE-2026-10236MEDIUM

SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9377

CVE-2026-9377MEDIUM

SourceCodester SUP Online Shopping productedit.php cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

Libra PHP File Manager 1.18 - Insecure Cookie Handling

CVE-2008-7027—webappsphp

Libra File Manager 1.18 and earlier allows remote attackers to bypass authentication and gain privileges by setting the

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyNewsletter 0.8 (beta5) - Multiple Vulnerabilities

CVE-2007-2372—webappsphp

admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit

23RISCO

abrir ↗

Referência

CVE-2010-1475

CVE-2010-1475—

Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows re

38RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

CVE-2008-4370—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-1498

CVE-2010-1498—

Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2008-6209

CVE-2008-6209—

SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Software Zone - 'cat_id' SQL Injection

CVE-2008-6209—webappsphp

SQL injection vulnerability in view_product.php in Vastal I-Tech Software Zone allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Codefixer MailingListPro - Database Disclosure

CVE-2008-6374—webappsasp

CodefixerSoftware MailingListPro Free Edition stores sensitive information under the web root with insufficient access c

23RISCO

abrir ↗

Referência✓ VexDay Proof

CS-Cart 1.3.5 - Authentication Bypass

CVE-2008-6394—webappsphp

SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aj Classifieds - Authentication Bypass

CVE-2008-7041—webappsphp

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Firefly 1.1.01 - 'doc_root' Remote File Inclusion

CVE-2007-2456—webappsphp

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

pPIM 1.0 - Upload/Change Password

CVE-2008-4427—webappsphp

changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative au

23RISCO

abrir ↗

Referência✓ VexDay Proof

chipmunk topsites - Authentication Bypass / Cross-Site Scripting

CVE-2008-7071—webappsphp

SQL injection vulnerability in authenticate.php in Chipmunk Topsites allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

chipmunk topsites - Authentication Bypass / Cross-Site Scripting

CVE-2008-7072—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Chipmunk Topsites allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pie Web m{a_e}sher mod rss 0.1 - Remote File Inclusion

CVE-2008-7073—webappsphp

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web M{a,e}sher, when register_gl

23RISCO

abrir ↗

Referência✓ VexDay Proof

ReVou Twitter Clone - Authentication Bypass

CVE-2008-7083—webappsphp

Multiple SQL injection vulnerabilities in ReVou Micro Blogging Twitter clone allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-1600

CVE-2010-1600—

SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2010-5322

CVE-2010-5322—

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.