Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência✓ VexDay Proof

Check New 4.52 - SQL Injection

CVE-2008-5586—webappsphp

SQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2026-57517

CVE-2026-57517CRITICAL

Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

48RISCO

abrir ↗

Referência✓ VexDay Proof

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—webappsphp

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISCO

abrir ↗

Referência✓ VexDay Proof

RankEm - 'siteID' SQL Injection

CVE-2008-5588—webappsasp

SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rankem - Authentication Bypass

CVE-2008-5589—webappsasp

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Product Sale Framework 0.1b - SQL Injection

CVE-2008-5590—webappsphp

SQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale Framework 0.1 beta allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

CVE-2008-5591—webappsphp

Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2014-5088

CVE-2014-5088—

Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via

23RISCO

abrir ↗

Referência

CVE-2014-5094

CVE-2014-5094—

Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.p

23RISCO

abrir ↗

Referência✓ VexDay Proof

webClassifieds 2005 - Authentication Bypass

CVE-2008-5817—webappsphp

Multiple SQL injection vulnerabilities in index.php in Web Scribble Solutions webClassifieds 2005 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2023-22518

CVE-2023-22518CRITICALsob ataqueransomware

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz

100RISCO

abrir ↗

Referência

CVE-2021-1498

CVE-2021-1498CRITICALsob ataque

Cisco HyperFlex HX Command Injection Vulnerabilities

100RISCO

abrir ↗

Referência

CVE-2012-2572

CVE-2012-2572—

Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote a

23RISCO

abrir ↗

Referência

CVE-2012-2580

CVE-2012-2580—

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re

23RISCO

abrir ↗

Referência

CVE-2012-2583

CVE-2012-2583—

Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-2584

CVE-2012-2584—

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2014-5201

CVE-2014-5201—

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2008-6104

CVE-2008-6104—

SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2008-6132

CVE-2008-6132—

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo

43RISCO

abrir ↗

Referência

CVE-2008-6132

CVE-2008-6132—

Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo

43RISCO

abrir ↗

Referência✓ VexDay Proof

BMForum 5.6 - 'tagname' SQL Injection

CVE-2008-6091—webappsphp

SQL injection vulnerability in plugins.php in BMForum 5.6, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpscripts Ranking Script - Insecure Cookie Handling

CVE-2008-6092—webappsphp

phpscripts Ranking Script allows remote attackers to bypass authentication and gain administrative access by sending an

23RISCO

abrir ↗

Referência

CVE-2009-4540

CVE-2009-4540—

SQL injection vulnerability in page.php in Mini CMS 1.0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noname CMS 1.0 - Multiple SQL Injections

CVE-2008-6093—webappsphp

SQL injection vulnerability in index.php in Noname CMS 1.0, when magic_quotes_gpc is disabled, allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discussion Forums 2k 3.3 - Multiple SQL Injections

CVE-2008-6100—webappsphp

Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Goople CMS 1.7 - Insecure Cookie Handling

CVE-2008-6118—webappsphp

win/content/upload.php in Goople CMS 1.7 allows remote attackers to bypass authentication and gain administrative access

23RISCO

abrir ↗

Referência✓ VexDay Proof

Full PHP Emlak Script - 'arsaprint.php' SQL Injection

CVE-2008-6133—webappsphp

SQL injection vulnerability in arsaprint.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

JW Player - 'playerready' Cross-Site Scripting

CVE-2012-3351—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flexphpic 0.0.x - Authentication Bypass

CVE-2008-6142—webappsphp

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPic 0.0.4 and FlexPHPic Pro 0.0.3, and other 0.0.

23RISCO

abrir ↗

Referência

CVE-2012-2910

CVE-2012-2910—

Multiple cross-site scripting (XSS) vulnerabilities in SiliSoftware phpThumb() 1.7.11 allow remote attackers to inject a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.