Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.381exploits catalogados

36.530CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.070VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência✓ VexDay Proof

Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-2180—webappsphp

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Rental Property Script 4.5 - 'pid' SQL Injection

CVE-2008-2190—webappsphp

SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

CVE-2008-2191—webappsphp

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2018-10561

CVE-2018-10561CRITICALsob ataque

An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images

100RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

ScorpNews 1.0 - 'site' Remote File Inclusion

CVE-2008-2193—webappsphp

PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Miniweb 2.0 - 'historymonth' SQL Injection

CVE-2008-2197—webappsphp

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kmita Mail 3.0 - 'file' Remote File Inclusion

CVE-2008-2199—webappsphp

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_g

23RISCO

abrir ↗

Referência✓ VexDay Proof

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

CVE-2008-2216—webappsphp

Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Content Management System for Phprojekt 0.6.1 - File Disclosure

CVE-2008-2217—webappsphp

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeDB 1.1.1 - 'list.php' Local File Inclusion

CVE-2008-3190—webappsphp

Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

jsite 1.0 oe - SQL Injection / Local File Inclusion

CVE-2008-3193—webappsphp

SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page param

23RISCO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1652

CVE-2019-1652HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISCO

abrir ↗

Referência★ 25

watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819

CVE-2025-57819CRITICALsob ataque

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

100RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - InternalOpenColorProfile Heap Overflow (PoC) (MS08-046)

CVE-2008-2245—doswindows

Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manage

35RISCO

abrir ↗

Referência

CVE-2012-1261

CVE-2012-1261—

Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow

23RISCO

abrir ↗

Referência✓ VexDay Proof

JETIK-WEB Software - 'kat' SQL Injection

CVE-2008-6401—webappsphp

SQL injection vulnerability in sayfa.php in JETIK-WEB allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenRat 0.8-beta4 - 'tpl_dir' Remote File Inclusion

CVE-2008-6403—webappsphp

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier a

23RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-16662

CVE-2019-16662—

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a

60RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

Linkspile - 'cat_id' SQL Injection

CVE-2008-2263—webappsphp

SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência✓ VexDay Proof

Kostenloses Linkmanagementscript - Remote File Inclusion

CVE-2008-2270—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-33891

CVE-2022-33891HIGHsob ataque

Apache Spark shell command injection vulnerability via Spark UI

100RISCO

abrir ↗

Referência

CVE-2023-41892

CVE-2023-41892CRITICAL

Craft CMS Remote Code Execution vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.