Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

Social Engine 3.06 - 'category_id' SQL Injection

CVE-2009-0400—webappsphp

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

EfesTECH Haber 5.0 - 'id' SQL Injection

CVE-2007-2662—webappsphp

SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p

23RISCO

abrir ↗

Referência✓ VexDay Proof

Einstein 1.01 - Local Password Disclosure

CVE-2005-0619—localwindows

Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows l

23RISCO

abrir ↗

Referência✓ VexDay Proof

xweblog 2.1 - 'kategori.asp' SQL Injection

CVE-2006-5023—webappsasp

SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-Smart Cart 1.0 - 'Product_ID' SQL Injection

CVE-2007-0092—webappsasp

SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDocStore - 'doc.php?doc_id' SQL Injection

CVE-2007-3452—webappsphp

SQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MamboWiki 0.9.6 - Remote File Inclusion

CVE-2006-4282—webappsphp

PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier f

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component jooget 2.6.8 - SQL Injection

CVE-2008-0829—webappsphp

SQL injection vulnerability in jooget.php in the Joomlapixel Jooget! (com_jooget) 2.6.8 component for Joomla! and Mambo

23RISCO

abrir ↗

Referência✓ VexDay Proof

EQdkp 1.3.2f - 'user_id' Authentication Bypass

CVE-2008-2222—webappsphp

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link Bid Script 1.5 - Multiple SQL Injections

CVE-2008-4175—webappsphp

Multiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlashGet 1.9.0.1012 - 'FTP PWD Response' SEH Stack Overflow

CVE-2008-4321—remotewindows

Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long res

23RISCO

abrir ↗

Referência✓ VexDay Proof

Basic PHP Events Lister 1.0 - SQL Injection

CVE-2008-6464—webappsphp

SQL injection vulnerability in event.php in Mevin Productions Basic PHP Events Lister 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_a6mambocredits' 1.0.0 - Remote File Inclusion

CVE-2006-4288—webappsphp

PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discuz! 5.0.0 GBK - SQL Injection / Admin Credentials Disclosure

CVE-2006-5561—webappsphp

SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiRez 3.4 - 'book_id' SQL Injection

CVE-2007-0128—webappsasp

SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiaCMS 4.6.5 - Multiple SQL Injections

CVE-2008-3785—webappsphp

Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

openEngine 2.0 beta4 - Remote File Inclusion

CVE-2008-4329—webappsphp

PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ HotScripts-like Site - 'cid' SQL Injection

CVE-2008-6243—webappsphp

SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MyContent 1.1.13 - Blind SQL Injection

CVE-2008-6430—webappsphp

SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection

CVE-2008-4202—webappsphp

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drinks Complete Website 2.1.0 - 'drinkid' SQL Injection

CVE-2008-5169—webappsphp

SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Webshop 1.02 - Authentication Bypass

CVE-2008-6627—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Dir Submit - Authentication Bypass

CVE-2009-1787—webappsphp

Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'lpro.php' SQL Injection

CVE-2008-5779—webappsphp

SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

AskPert - Authentication Bypass

CVE-2008-6309—webappsphp

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Groone's GLink ORGanizer - 'index.php?cat' SQL Injection

CVE-2009-0299—webappsphp

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'redir.php' SQL Injection

CVE-2008-5928—webappsphp

SQL injection vulnerability in redir.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

CVE-2008-4351—webappsphp

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Hosting Directory - 'cat_id' SQL Injection

CVE-2008-6782—webappsphp

SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPAuctionSystem - Cross-Site Scripting / SQL Injection

CVE-2009-0106—webappsphp

SQL injection vulnerability in profile.php in PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.