Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

5.629 exploits

Referência✓ VexDay Proof

geccBBlite 2.0 - 'id' SQL Injection

CVE-2008-4517—webappsphp

SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Script Toko Online 5.01 - SQL Injection

CVE-2009-0296—webappsphp

SQL injection vulnerability in shop_display_products.php in Script Toko Online 5.01 allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

myEvent 1.6 - 'eventdate' SQL Injection

CVE-2008-4650—webappsphp

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component mambads 1.0 RC1 Beta - SQL Injection

CVE-2008-5226—webappsphp

SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPSiteWare Home Builder 1.0/2.0 - SQL Injection

CVE-2008-5774—webappsasp

Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

plx Ad Trader 3.2 - 'adid' SQL Injection

CVE-2008-3025—webappsphp

SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJSquare Free Polling Script - 'DB' Multiple Vulnerabilities

CVE-2008-7044—webappsphp

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script (AJPoll) Database version allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live Music Plus 1.1.0 - 'id' SQL Injection

CVE-2008-3352—webappsphp

SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

deeemm CMS (dmcms) 0.7.4 - Multiple Vulnerabilities

CVE-2008-3720—webappsphp

SQL injection vulnerability in index.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyCard 1.0.2 - 'id' SQL Injection

CVE-2008-4738—webappsphp

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCal - 'webCal3_detail.asp?event_id' SQL Injection

CVE-2009-1945—webappsphp

SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Biller 0.1 - 'Username' Blind SQL Injection

CVE-2009-2036—webappsphp

SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.1 - 'table' SQL Injection

CVE-2007-5719—webappsphp

SQL injection vulnerability in bb_func_search.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

MMSLamp - 'idpro' SQL Injection

CVE-2007-6575—webappsphp

SQL injection vulnerability in default.php in MMSLamp allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClipShare - 'UID' SQL Injection

CVE-2008-0089—webappsphp

SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyWay CMS - 'mid' SQL Injection

CVE-2008-2555—webappsphp

SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

HoMaP-CMS 0.1 - 'go' SQL Injection

CVE-2008-2989—webappsphp

SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

pLink 2.07 - 'linkto.php' Blind SQL Injection

CVE-2008-4357—webappsphp

SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

YourFreeWorld Autoresponder Hosting - 'tr.php' SQL Injection

CVE-2008-4882—webappsphp

SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

CVE-2008-4369—webappsphp

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion

CVE-2006-4532—webappsphp

PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vastal I-Tech Share Zone - 'id' SQL Injection

CVE-2008-4468—webappsphp

SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsLetter 3.5 - 'NL_PATH' Remote File Inclusion

CVE-2006-3986—webappsphp

PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Libera CMS 1.12 - 'cookie' SQL Injection

CVE-2008-4700—webappsphp

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_shoutbox 4.4 - Remote File Inclusion

CVE-2006-3989—webappsphp

PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection

CVE-2008-4772—webappsphp

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZeusCart 2.0 - 'category_list.php' SQL Injection

CVE-2008-5216—webappsphp

SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

BitDefender - Module pdf.xmd Infinite Loop Denial of Service (PoC)

CVE-2008-5409—doswindows

Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullGu

28RISCO

abrir ↗

Referência✓ VexDay Proof

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

CVE-2007-5845—webappsphp

Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Message Board 2.2.1c - SQL Injection

CVE-2007-5887—webappsasp

SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitra

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.