Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.150exploits catalogados

39.601CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9.680Nuclei 4.488Metasploit 3.525✓ só verificadosrecentes populares risco

25.557 exploits

Referência✓ VexDay Proof

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

CVE-2008-6077—webappsphp

SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

rConfig 3.9.4 - 'search.crud.php' Remote Command Injection

CVE-2020-10879—webappsphp

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nod

45RISCO

abrir ↗

Referência

CVE-2015-3035

CVE-2015-3035HIGHsob ataque

Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before

100RISCO

abrir ↗

Referência

CVE-2023-25690

CVE-2023-25690CRITICAL

Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

70RISCO

abrir ↗

Referência✓ VexDay Proof

Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload

CVE-2008-6084—webappsphp

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-2265

CVE-2009-2265—

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable fil

60RISCO

abrir ↗

Referência

CVE-2009-3309

CVE-2009-3309—

SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2008-1122

CVE-2008-1122—

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Dream4 Koobi Pro 5.7 - 'categ' SQL Injection

CVE-2008-1122—webappsphp

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kasseler CMS 1.3.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-3088—webappsphp

Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacker

23RISCO

abrir ↗

Referência

CVE-2008-4648

CVE-2008-4648—

Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.60 - Persistent Cross-Site Scripting

CVE-2008-4696—remotewindows

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary w

50RISCO

abrir ↗

Referência

CVE-2016-10073

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RISCO

abrir ↗

Referência

CVE-2013-5311

CVE-2013-5311—

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2016-10073

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RISCO

abrir ↗

Referência

CVE-2017-14493

CVE-2017-14493—

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu

45RISCO

abrir ↗

Referência✓ VexDay Proof

Camera Life 2.6.2b4 - SQL Injection / Cross-Site Scripting

CVE-2008-6087—webappsphp

Cross-site scripting (XSS) vulnerability in topic.php in Camera Life 2.6.2b4 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2021-25094

CVE-2021-25094—

Tatsu < 3.3.12 - Unauthenticated RCE

60RISCO

abrir ↗

Referência

CVE-2009-3529

CVE-2009-3529—

SQL injection vulnerability in index.php in RadScripts RadBids Gold 4 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Barryvan Compo Manager 0.3 - Remote File Inclusion

CVE-2008-1126—webappsphp

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arb

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Real Estate Script 1.1 - SQL Injection

CVE-2008-3123—webappsphp

SQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

miniBloggie 1.0 - 'del.php' Blind SQL Injection

CVE-2008-4628—webappsphp

SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

CVE-2008-4732—webappsphp

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noname CMS 1.0 - Multiple SQL Injections

CVE-2008-6093—webappsphp

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers t

23RISCO

abrir ↗

Referência

Redis 8.0.2 - RCE

CVE-2025-32023HIGHremotelinux

Redis allows out of bounds writes in hyperloglog commands leading to RCE

41RISCO

abrir ↗

Referência

CVE-2009-3510

CVE-2009-3510—

SQL injection vulnerability in viewListing.php in linkSpheric 0.74 Beta 6 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2009-3514

CVE-2009-3514—

Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via (1) the

23RISCO

abrir ↗

Referência

CVE-2009-3543

CVE-2009-3543—

SQL injection vulnerability in _phenotype/admin/login.php in Phenotype CMS before 2.9 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

DESlock+ < 3.2.6 - 'DLMFENC.sys' Local Kernel Ring0 link list zero (PoC)

CVE-2008-1138—doswindows

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

CVE-2008-4749—remotewindows

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborato

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.