Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência✓ VexDay Proof

EfesTECH Haber 5.0 - 'id' SQL Injection

CVE-2007-2662—webappsphp

SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id p

23RISCO

abrir ↗

Referência

CVE-2014-7951

CVE-2014-7951—

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att

23RISCO

abrir ↗

Referência

CVE-2014-7951

CVE-2014-7951—

Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att

23RISCO

abrir ↗

Referência

CVE-2012-5319

CVE-2012-5319—

Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Photocart 3.9 - Multiple SQL Injections

CVE-2008-3788—webappsphp

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote at

23RISCO

abrir ↗

Referência

CVE-2012-5005

CVE-2012-5005—

Cross-site request forgery (CSRF) vulnerability in admin/admin_options.php in VR GPub 4.0 allows remote attackers to hij

23RISCO

abrir ↗

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10045

CVE-2012-10045CRITICAL

XODA 0.4.5 Arbitrary PHP File Upload

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2012-10049

CVE-2012-10049CRITICAL

WebPageTest Arbitrary PHP File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2009-3215

CVE-2009-3215—

SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion

CVE-2006-4276—webappsphp

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

SportsPHool 1.0 - 'mainnav' Remote File Inclusion

CVE-2006-4278—webappsphp

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP League 0.82 - 'classement.php' SQL Injection

CVE-2006-5676—webappsasp

SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiAffiliate 1.4 - 'id' SQL Injection

CVE-2007-0306—webappsasp

SQL injection vulnerability in visu_user.asp in Digiappz DigiAffiliate 1.4 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Car Manager 1.1 - SQL Injection

CVE-2007-1704—webappsphp

SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection

CVE-2007-1807—webappsphp

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

CVE-2007-2902—webappsphp

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Battle.net Clan Script for PHP 1.5.1 - SQL Injection

CVE-2007-1909—webappsphp

SQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5.1 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elkagroup Image Gallery 1.0 - SQL Injection

CVE-2007-3461—webappsphp

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP123 Top Sites - 'category.php?cat' SQL Injection

CVE-2007-4054—webappsphp

SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArcadeBuilder Game Portal Manager 1.7 - SQL Injection

CVE-2007-3521—webappsphp

SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC estore 3.0 - 'cat_id' Blind SQL Injection

CVE-2007-4627—webappsphp

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebChat 0.78 - 'login.php?rid' SQL Injection

CVE-2007-3534—webappsphp

SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection

CVE-2007-4055—webappsasp

SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blog:CMS 4.2.1b - SQL Injection / Cross-Site Scripting

CVE-2008-0360—webappsphp

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.