Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2011-5228

CVE-2011-5228—

Cross-site scripting (XSS) vulnerability in the Search module (quickstart/search) in appRain CMF 0.1.5 allows remote att

23RISCO

abrir ↗

Referência

CVE-2012-2939

CVE-2012-2939—

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute

23RISCO

abrir ↗

Referência

CVE-2026-11530

CVE-2026-11530MEDIUM

imvks786 student_management_system Login index.ph sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

W3Filer 2.1.3 - Remote Stack Overflow (PoC)

CVE-2007-3548—doswindows

Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or

23RISCO

abrir ↗

Referência✓ VexDay Proof

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

CVE-2007-4140—localwindows

Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência

CVE-2015-1422

CVE-2015-1422—

Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2015-1422

CVE-2015-1422—

Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

CVE-2008-2295—webappsphp

Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remot

23RISCO

abrir ↗

Referência

CVE-2010-5001

CVE-2010-5001—

SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-5008

CVE-2010-5008—

SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-5009

CVE-2010-5009—

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-11488

CVE-2026-11488MEDIUM

code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

33RISCO

abrir ↗

Referência

CVE-2012-4344

CVE-2012-4344—

Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência✓ VexDay Proof

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

CVE-2008-2341—webappsphp

PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2025-2749

CVE-2025-2749HIGHsob ataque

Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

71RISCO

abrir ↗

Referência

CVE-2021-31962

CVE-2021-31962CRITICAL

Kerberos AppContainer Security Feature Bypass Vulnerability

48RISCO

abrir ↗

Referência✓ VexDay Proof

MeltingIce File System 1.0 - Arbitrary Add User

CVE-2008-2348—webappsphp

MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS WebManager-Pro - Multiple SQL Injections

CVE-2008-2351—webappsphp

Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

How2ASP.net WebBoard 4.1 - SQL Injection

CVE-2008-2417—webappsphp

SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities

CVE-2008-5712—doslinux

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)

23RISCO

abrir ↗

Referência

CVE-2015-1518

CVE-2015-1518—

SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2015-1538

CVE-2015-1538—

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android bef

45RISCO

abrir ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-1296

CVE-2010-1296—

Multiple buffer overflows in Adobe Photoshop CS4 before 11.0.2 allow user-assisted remote attackers to execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2009-2223

CVE-2009-2223—

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2015-1725

CVE-2015-1725—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Referência

CVE-2018-4090

CVE-2018-4090—

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS

23RISCO

abrir ↗

Referência

CVE-2019-19230

CVE-2019-19230CRITICAL

An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component th

48RISCO

abrir ↗

Referência

CVE-2015-3933

CVE-2015-3933—

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.