Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.058exploits catalogados

35.300CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.175GitHub PoC 14.096VulnCheck XDB 8.607Nuclei 4.255Metasploit 3.474✓ só verificadosrecentes populares risco

22.175 exploits

Referência✓ VexDay Proof

gxine 0.5.6 - HTTP Plugin Remote Buffer Overflow (PoC)

CVE-2006-2802—doslinux

Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial o

28RISCO

abrir ↗

Referência✓ VexDay Proof

OwnRS blog beta3 - SQL Injection / Cross-Site Scripting

CVE-2008-2856—webappsphp

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Techno Dreams Articles & Papers 2.0 - SQL Injection

CVE-2006-4891—webappsasp

SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows r

23RISCO

abrir ↗

Referência

CVE-2010-2684

CVE-2010-2684—

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-0971

CVE-2010-0971—

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor pr

23RISCO

abrir ↗

Referência

CVE-2010-0971

CVE-2010-0971—

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor pr

23RISCO

abrir ↗

Referência

CVE-2026-58126

CVE-2026-58126CRITICAL

PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

48RISCO

abrir ↗

Referência

CVE-2010-2688

CVE-2010-2688—

SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2007-5816

CVE-2007-5816—

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by maki

23RISCO

abrir ↗

Referência

CVE-2014-5101

CVE-2014-5101—

Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2012-5874

CVE-2012-5874—

Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Eli

23RISCO

abrir ↗

Referência

CVE-2012-5874

CVE-2012-5874—

Multiple SQL injection vulnerabilities in the (1) update_whosonline_reg and (2) update_whosonline_guest functions in Eli

23RISCO

abrir ↗

Referência

CVE-2013-2690

CVE-2013-2690—

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2013-2690

CVE-2013-2690—

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2018-14029

CVE-2018-14029—

CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as dem

23RISCO

abrir ↗

Referência

CVE-2019-25670

CVE-2019-25670HIGH

River Past Video Cleaner 7.6.3 Buffer Overflow via SEH

41RISCO

abrir ↗

Referência

CVE-2010-1702

CVE-2010-1702—

SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1705

CVE-2010-1705—

SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass

CVE-2008-0403—remotehardware

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, whic

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion

CVE-2006-6202—webappsphp

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pro

23RISCO

abrir ↗

Referência✓ VexDay Proof

Password Protector SD 1.3.1 - Insecure Cookie Handling

CVE-2009-2003—webappsphp

Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acce

23RISCO

abrir ↗

Referência

CVE-2010-1057

CVE-2010-1057—

Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is di

23RISCO

abrir ↗

Referência

CVE-2018-18417

CVE-2018-18417—

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d

23RISCO

abrir ↗

Referência

CVE-2012-4254

CVE-2012-4254—

MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/c

23RISCO

abrir ↗

Referência

CVE-2025-65008

CVE-2025-65008CRITICAL

OS Command Injection in WODESYS WD-R608U router

48RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyphorum 1.5a - '/mep/frame.php' Remote File Inclusion

CVE-2007-0361—webappsphp

PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion

CVE-2007-0572—webappsphp

PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earli

23RISCO

abrir ↗

Referência

CVE-2010-1739

CVE-2010-1739—

SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2019-9625

CVE-2019-9625—

JBMC DirectAdmin 1.55 allows CSRF via the /CMD_ACCOUNT_ADMIN URI to create a new admin account.

23RISCO

abrir ↗

Referência✓ VexDay Proof

DreamAccount 3.1 - 'da_path' Remote File Inclusion

CVE-2006-2881—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, al

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.