Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.797 exploits

Referência✓ VexDay Proof

exV2 < 2.0.4.3 - 'sort' SQL Injection

CVE-2006-5030—webappsphp

SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)

CVE-2007-0388—webappsphp

SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the

23RISCO

abrir ↗

Referência

CVE-2010-2921

CVE-2010-2921—

SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure

CVE-2007-1172—webappsphp

SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crea-Book 1.0 - Admin Access Bypass / Database Disclosure / Code Execution

CVE-2007-2000—webappsphp

Multiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS module Articles 1.02 - 'print.php?id' SQL Injection

CVE-2007-3311—webappsphp

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2014-7872

CVE-2014-7872—

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RISCO

abrir ↗

Referência

CVE-2014-7872

CVE-2014-7872—

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpFullAnnu (PFA) 6.0 - SQL Injection

CVE-2007-5068—webappsphp

SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

JobSite Professional 2.0 - 'file.php' SQL Injection

CVE-2007-5785—webappsphp

SQL injection vulnerability in file.php in JobSite Professional 2.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Content Injector 1.53 - 'index.php' SQL Injection

CVE-2007-6394—webappsphp

SQL injection vulnerability in index.php in Content Injector 1.53 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

CVE-2007-6543—webappsphp

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

DigiLeave 1.2 - 'book_id' Blind SQL Injection

CVE-2008-3309—webappsasp

SQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2008-4344

CVE-2008-4344—

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the Ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection

CVE-2008-4717—webappsphp

SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2023-25438

CVE-2023-25438HIGH

An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalat

41RISCO

abrir ↗

Referência

CVE-2011-5112

CVE-2011-5112—

SQL injection vulnerability in Alameda (com_alameda) component before 1.0.1 for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2012-1778

CVE-2012-1778—

SQL injection vulnerability in artykul_print.php in CreateVision CMS allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2009-3357

CVE-2009-3357—

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for

23RISCO

abrir ↗

Referência

CVE-2009-4428

CVE-2009-4428—

SQL injection vulnerability in the JoomPortfolio (com_joomportfolio) component 1.0.0 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-2923

CVE-2010-2923—

SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2011-5113

CVE-2011-5113—

SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com_techfolio) component 1.0 for Joomla

23RISCO

abrir ↗

Referência

CVE-2008-3725

CVE-2008-3725—

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2923

CVE-2010-2923—

SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-4144

CVE-2010-4144—

SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Board - 'id' SQL Injection

CVE-2008-3725—webappsphp

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4996

CVE-2010-4996—

SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

CVE-2009-1032—webappsphp

SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2016-0049

CVE-2016-0049—

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.