Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2018-25415

CVE-2018-25415HIGH

AiOPMSD Final 1.0.0 SQL Injection via director Parameter

41RISCO

abrir ↗

Referência

CVE-2018-25414

CVE-2018-25414HIGH

AiOPMSD Final 1.0.0 SQL Injection via actor.php

41RISCO

abrir ↗

Referência✓ VexDay Proof

CiBlog 3.1 - 'id' SQL Injection

CVE-2008-2971—webappsphp

SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHP KnowledgeBase Script 2.4 - 'cat_id' SQL Injection

CVE-2008-2972—webappsphp

SQL injection vulnerability in index.php in KbLance allows remote attackers to execute arbitrary SQL commands via the ca

23RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência✓ VexDay Proof

TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2975—webappsphp

Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2012-2590

CVE-2012-2590—

Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

CVE-2008-2982—webappsphp

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote a

23RISCO

abrir ↗

Referência

CVE-2019-20215

CVE-2019-20215—

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the

60RISCO

abrir ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2984—webappsphp

Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2020-8654

CVE-2020-8654—

An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoD

60RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Autos 2.9.1 - 'catid' SQL Injection

CVE-2008-4498—webappsphp

SQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

ABC-View Manager 1.42 - '.psp' Local Buffer Overflow

CVE-2007-2284—localwindows

Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted .

23RISCO

abrir ↗

Referência

CVE-2025-34037

CVE-2025-34037CRITICAL

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

85RISCO

abrir ↗

Referência✓ VexDay Proof

cmreams CMS 1.3.1.1 beta2 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2985—webappsphp

Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,

23RISCO

abrir ↗

Referência

CVE-2023-28343

CVE-2023-28343—

OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/managemen

60RISCO

abrir ↗

Referência

CVE-2012-2592

CVE-2012-2592—

Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpDMCA 1.0.0 - Multiple Remote File Inclusions

CVE-2008-2986—webappsphp

Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência

CVE-2015-2794

CVE-2015-2794—

The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain S

60RISCO

abrir ↗

Referência✓ VexDay Proof

audioCMS arash 0.1.4 - 'arashlib_dir' Remote File Inclusion

CVE-2007-2301—webappsphp

Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Blind SQL Injection

CVE-2008-4523—webappsphp

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

RiotPix 0.61 - 'forumid' Blind SQL Injection

CVE-2009-0110—webappsphp

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2014-0322

CVE-2014-0322HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v

100RISCO

abrir ↗

Referência

CVE-2014-0322

CVE-2014-0322HIGHsob ataque

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v

100RISCO

abrir ↗

Referência

CVE-2019-20361

CVE-2019-20361HIGH

There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to b

78RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component FacileForms 1.4.4 - Remote File Inclusion

CVE-2008-2990—webappsphp

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 fo

23RISCO

abrir ↗

Referência

CVE-2009-2335

CVE-2009-2335—

WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the u

60RISCO

abrir ↗

Referência

CVE-2013-3906

CVE-2013-3906HIGHsob ataque

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compati

100RISCO

abrir ↗

Referência

CVE-2017-14491

CVE-2017-14491—

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut

45RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.