Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência✓ VexDay Proof

PHP-Lance 1.52 - 'catid' SQL Injection

CVE-2008-4716—webappsphp

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Gemini Portal 4.7 - 'lang' Remote File Inclusion

CVE-2008-4720—webappsphp

Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Post Comments 3.0 - Insecure Cookie Handling

CVE-2008-4721—webappsphp

PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.60 - Persistent Cross-Site Scripting

CVE-2008-4725—remotewindows

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

CVE-2008-4732—webappsphp

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PlugSpace 0.1 - 'navi' Local File Inclusion

CVE-2008-4739—webappsphp

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attack

23RISCO

abrir ↗

Referência

CVE-2008-4744

CVE-2008-4744—

SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

KVIrc 3.4.0 - Virgo Remote Format String (PoC)

CVE-2008-4748—doswindows

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC UR

23RISCO

abrir ↗

Referência

CVE-2018-5723

CVE-2018-5723—

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4749—remotewindows

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato

23RISCO

abrir ↗

Referência

CVE-2018-8734

CVE-2018-8734—

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_extplorer 2.0.0 RC2 - Local Directory Traversal

CVE-2008-4764—webappsphp

Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2008-4765

CVE-2008-4765—

SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

TugZip 3.00 Archiver - '.zip' Local Buffer Overflow

CVE-2008-4779—localwindows

Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary

50RISCO

abrir ↗

Referência

CVE-2020-1054

CVE-2020-1054HIGHsob ataque

Win32k Elevation of Privilege Vulnerability

98RISCO

abrir ↗

Referência

CVE-2009-3430

CVE-2009-3430—

SQL injection vulnerability in login.php in Allomani Mobile 2.5 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

GForge < 4.6b2 - 'skill_delete' SQL Injection

CVE-2007-4966—webappsphp

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2017-13772

CVE-2017-13772—

Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated

35RISCO

abrir ↗

Referência

CVE-2017-8734

CVE-2017-8734—

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arb

35RISCO

abrir ↗

Referência

CVE-2013-1359

CVE-2013-1359—

An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5

60RISCO

abrir ↗

Referência

CVE-2022-26134

CVE-2022-26134CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência

CVE-2022-26134

CVE-2022-26134CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência

CVE-2009-3446

CVE-2009-3446—

SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote atta

23RISCO

abrir ↗

Referência

CVE-2010-1622

CVE-2010-1622—

SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote at

35RISCO

abrir ↗

Referência

CVE-2019-13068

CVE-2019-13068—

public/app/features/panel/panel_ctrl.ts in Grafana before 6.2.5 allows HTML Injection in panel drilldown links (via the

35RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin alternate_profiles - 'id' SQL Injection

CVE-2008-4785—webappsphp

SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2011-4075

CVE-2011-4075—

The masort function in lib/functions.php in phpLDAPadmin 1.2.x before 1.2.2 allows remote attackers to execute arbitrary

50RISCO

abrir ↗

Referência

CVE-2025-40552

CVE-2025-40552CRITICAL

SolarWinds Web Help Desk Authentication Bypass Vulnerability

75RISCO

abrir ↗

Referência

CVE-2011-0522

CVE-2011-0522—

The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/code

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.