Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados

34.508CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentes populares risco

21.554 exploits

Referência✓ VexDay Proof

Mambo Component Pearl 1.6 - Multiple Remote File Inclusions

CVE-2006-3340—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is ena

28RISCO

abrir ↗

Referência✓ VexDay Proof

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

CVE-2008-0224—webappsphp

SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component joovideo 1.2.2 - 'id' SQL Injection

CVE-2008-1460—webappsphp

SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.3.1/1.5 - SQL Injection

CVE-2008-0255—webappsphp

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Classifieds Script 05122008 - SQL Injection

CVE-2008-2453—webappsphp

Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

SunByte e-Flower - 'id' SQL Injection

CVE-2008-5969—webappsphp

SQL injection vulnerability in popupproduct.php in Sunbyte e-Flower allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Ignite Gallery 0.8.3 - SQL Injection

CVE-2008-6182—webappsphp

SQL injection vulnerability in the Ignite Gallery (com_ignitegallery) component 0.8.0 through 0.8.3 for Joomla! allows r

23RISCO

abrir ↗

Referência✓ VexDay Proof

Peel Shopping 3.1 - 'rubid' SQL Injection

CVE-2008-6892—webappsphp

SQL injection vulnerability in lire/index.php in Peel 3.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZContents CMS 2.0.3 - Multiple Local File Inclusions

CVE-2008-7055—webappsphp

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include

23RISCO

abrir ↗

Referência

CVE-2010-2317

CVE-2010-2317—

Multiple SQL injection vulnerabilities in WmsCms 2.0 and earlier allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2009-2340

CVE-2009-2340—

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência

CVE-2012-1023

CVE-2012-1023—

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-6086

CVE-2017-6086—

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.1

23RISCO

abrir ↗

Referência

CVE-2010-4801

CVE-2010-4801—

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2010-4801

CVE-2010-4801—

Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2025-34112

CVE-2025-34112CRITICAL

Riverbed SteelCentral NetProfiler / NetExpress 10.8.7 RCE

63RISCO

abrir ↗

Referência

CVE-2021-22557

CVE-2021-22557MEDIUM

Code execution in SLO Generator via YAML Payload

33RISCO

abrir ↗

Referência

CVE-2023-3526

CVE-2023-3526CRITICAL

PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices

48RISCO

abrir ↗

Referência

CVE-2012-5104

CVE-2012-5104—

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2014-3992

CVE-2014-3992—

Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2006-3362

CVE-2006-3362—

Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) G

23RISCO

abrir ↗

Referência✓ VexDay Proof

Osprey 1.0 - 'GetRecord.php' Remote File Inclusion

CVE-2006-6631—webappsphp

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

MultiCart 1.0 - Blind SQL Injection

CVE-2007-5261—webappsphp

Multiple SQL injection vulnerabilities in MultiCart 1.0 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softbiz Freelancers Script 1 - SQL Injection

CVE-2007-6124—webappsphp

Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.6 - SQL Injection

CVE-2008-1726—webappsphp

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

CVE-2008-4894—webappsphp

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5728—webappsphp

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and regi

23RISCO

abrir ↗

Referência

CVE-2010-1740

CVE-2010-1740—

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-1713

CVE-2010-1713—

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-1713

CVE-2010-1713—

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.