Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2014-9345

CVE-2014-9345—

SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6.6 and earlier allows r

23RISCO

abrir ↗

Referência

CVE-2014-8295

CVE-2014-8295—

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2014-8295

CVE-2014-8295—

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Podcast Generator 1.1 - Remote Code Execution

CVE-2009-1226—webappsphp

core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions

23RISCO

abrir ↗

Referência

CVE-2014-3962

CVE-2014-3962—

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2014-3962

CVE-2014-3962—

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2014-9095

CVE-2014-9095—

Multiple SQL injection vulnerabilities in Raritan Power IQ 4.1.0 and 4.2.1 allow remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2014-100031

CVE-2014-100031—

Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2014-0794

CVE-2014-0794—

SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authentic

23RISCO

abrir ↗

Referência

CVE-2009-3823

CVE-2009-3823—

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote a

23RISCO

abrir ↗

Referência

CVE-2009-4723

CVE-2009-4723—

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência

CVE-2012-5331

CVE-2012-5331—

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (do

23RISCO

abrir ↗

Referência

CVE-2009-3507

CVE-2009-3507—

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kipper 2.01 - Cross-Site Scripting / Local File Inclusion / File Disclosure

CVE-2009-0765—webappsphp

Directory traversal vulnerability in index.php in Kipper 2.01 allows remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Referência

CVE-2009-4426

CVE-2009-4426—

Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4426

CVE-2009-4426—

Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuestCal 2.1 - 'index.php?lang' Local File Inclusion

CVE-2009-1319—webappsphp

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2009-2305

CVE-2009-2305—

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //

23RISCO

abrir ↗

Referência

CVE-2018-11404

CVE-2018-11404—

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

beLive 0.2.3 - 'arch.php?arch' Local File Inclusion

CVE-2009-1649—webappsphp

Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência

CVE-2026-5311

CVE-2026-5311MEDIUM

D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

33RISCO

abrir ↗

Referência

CVE-2026-5310

CVE-2026-5310LOW

Enter Software Iperius Backup IperiusAccounts.ini hard-coded key

28RISCO

abrir ↗

Referência

CVE-2010-1924

CVE-2010-1924—

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

elvin bts 1.2.0 - Multiple Vulnerabilities

CVE-2009-2124—webappsphp

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência

CVE-2023-5212

CVE-2023-5212CRITICAL

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

48RISCO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.