Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência

CVE-2019-1821

CVE-2019-1821HIGH

Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities

78RISCO

abrir ↗

Referência✓ VexDay Proof

Battle.net Clan Script 1.5.x - SQL Injection

CVE-2008-2522—webappsphp

SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickUpCMS - Multiple SQL Injections Vulnerabilities

CVE-2008-2530—webappsphp

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Extreme phpBB 3.0.1 - 'functions.php' Remote File Inclusion

CVE-2007-1105—webappsphp

PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.1 - SQL Injection

CVE-2008-2536—webappsphp

SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

SCO UnixWare Reliant HA 1.1.4 - Local Privilege Escalation

CVE-2008-6558—localsco

Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local use

23RISCO

abrir ↗

Referência✓ VexDay Proof

BP Blog 6.0 - 'id' Blind SQL Injection

CVE-2008-2554—webappsasp

Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Power Phlogger 2.2.5 - 'css_str' SQL Injection

CVE-2008-2562—webappsphp

SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2008-2565

CVE-2008-2565—

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2019-18818

CVE-2019-18818—

strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s

60RISCO

abrir ↗

Referência

CVE-2019-18818

CVE-2019-18818—

strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s

60RISCO

abrir ↗

Referência✓ VexDay Proof

Banner Management Script - 'id' SQL Injection

CVE-2008-3749—webappsphp

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Angel Lms 7.1 - 'default.asp?id' SQL Injection

CVE-2007-1250—webappsasp

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Quiz 1.02 - Authentication Bypass

CVE-2008-6626—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MercuryBoard 1.1.5 - 'login.php' Blind SQL Injection

CVE-2008-6632—webappsphp

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2022-24716

CVE-2022-24716HIGH

Path traversal in Icinga Web 2

78RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-2565—webappsphp

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Address Book 4.0.x - Multiple SQL Injections

CVE-2008-2565—webappsphp

Multiple SQL injection vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2018-15708

CVE-2018-15708—

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISCO

abrir ↗

Referência

CVE-2018-15708

CVE-2018-15708—

Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP r

60RISCO

abrir ↗

Referência

CVE-2017-5521

CVE-2017-5521HIGHsob ataque

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R

100RISCO

abrir ↗

Referência✓ VexDay Proof

OxYProject 0.85 - 'edithistory.php' Remote Code Execution

CVE-2008-6651—webappsphp

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2014-4977

CVE-2014-4977—

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute

60RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.1.0 - 'id_category' SQL Injection

CVE-2007-2890—webappsphp

SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

wanewsletter 2.1.3 - Remote File Inclusion

CVE-2007-2969—webappsphp

PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to e

35RISCO

abrir ↗

Referência✓ VexDay Proof

Inout Search Engine - Remote Code Execution

CVE-2007-2988—webappsphp

A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administra

23RISCO

abrir ↗

Referência

CVE-2008-2566

CVE-2008-2566—

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting

CVE-2008-2566—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in PHP Address Book 3.1.5 and earlier allow remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component SimpleShop 3.4 - SQL Injection

CVE-2008-2568—webappsphp

SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

freeSSHd 1.2.1 - (Authenticated) Remote Stack Overflow (PoC)

CVE-2008-2573—doswindows

Stack-based buffer overflow in SFTP in freeSSHd 1.2.1 allows remote authenticated users to execute arbitrary code via a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.