Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.449exploits catalogados

35.552CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.332 exploits

Referência

CVE-2026-18613

CVE-2026-18613CRITICAL

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection

48RISCO

abrir ↗

Referência

CVE-2026-18612

CVE-2026-18612CRITICAL

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection

48RISCO

abrir ↗

Referência

CVE-2026-61523

CVE-2026-61523HIGH

WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

41RISCO

abrir ↗

Referência

CVE-2026-18610

CVE-2026-18610MEDIUM

NewType WebEIP EIP_Com_FileList.aspx improper authentication

33RISCO

abrir ↗

Referência✓ VexDay Proof

WebStudio eCatalogue - Blind SQL Injection

CVE-2008-5294—webappsphp

SQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

PG Real Estate - Authentication Bypass

CVE-2008-5306—webappsphp

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

CVE-2008-5308—webappsphp

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.7.13 - 'usersettings.php' Blind SQL Injection

CVE-2008-5320—webappsphp

SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2018-6941

CVE-2018-6941—

A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module GesGaleri - SQL Injection

CVE-2008-5321—webappsphp

SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-5322—webappsphp

Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, wh

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-5323—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitrotech 0.0.3a - Remote File Inclusion / SQL Injection

CVE-2008-5334—webappsphp

PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion 7.00.1 - 'messages.php' SQL Injection

CVE-2008-5335—webappsphp

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

yahoo answers - 'id' SQL Injection

CVE-2008-5490—webappsphp

SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

SlimCMS 1.0.0 - 'edit.php' SQL Injection

CVE-2008-5491—webappsphp

SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

VeryPDF PDFView - OCX ActiveX OpenPDF Heap Overflow (PoC)

CVE-2008-5492—doswindows

Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX

50RISCO

abrir ↗

Referência✓ VexDay Proof

PHPstore Wholesale - 'id' SQL Injection

CVE-2008-5493—webappsphp

SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Contact Info 1.0 - SQL Injection

CVE-2008-5494—webappsphp

SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

PozScripts Business Directory Script - 'cid' SQL Injection

CVE-2008-5496—webappsphp

SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities

CVE-2008-5518—remotemultiple

Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1

35RISCO

abrir ↗

Referência✓ VexDay Proof

postecards - SQL Injection / File Disclosure

CVE-2008-5559—webappsasp

SQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

postecards - SQL Injection / File Disclosure

CVE-2008-5560—webappsasp

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2018-7203

CVE-2018-7203—

Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netref 4.0 - Multiple SQL Injections

CVE-2008-5561—webappsphp

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência

CVE-2018-7203

CVE-2018-7203—

Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DL PayCart 1.34 - Admin Password Changing

CVE-2008-5565—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and earlier allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bonza Cart 1.10 - Admin Password Changing

CVE-2008-5567—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

IPNPro3 < 1.44 - Admin Password Changing

CVE-2008-5568—webappsphp

Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Professional Download Assistant 0.1 - Authentication Bypass

CVE-2008-5571—webappsasp

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.