Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2006-7247

CVE-2006-7247—

SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

vbzoom 1.x - 'forum.php?MainID' SQL Injection

CVE-2006-3142—webappsphp

SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

Fiberhome AN5506-04-F RP2669 - Persistent Cross-Site Scripting

CVE-2019-9556—webappshardware

FiberHome an5506-04-f RP2669 devices have XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure

CVE-2006-3571—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

kubix 0.7 - Multiple Vulnerabilities

CVE-2006-7116—webappsphp

SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Unreal Tournament 3 1.3 - Directory Traversal

CVE-2008-4243—remotewindows

Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tourna

23RISCO

abrir ↗

Referência

CVE-2010-4808

CVE-2010-4808—

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p

23RISCO

abrir ↗

Referência

CVE-2026-67207

CVE-2026-67207HIGH

Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController

41RISCO

abrir ↗

Referência

CVE-2026-67206

CVE-2026-67206HIGH

Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload

41RISCO

abrir ↗

Referência

CVE-2012-4055

CVE-2012-4055—

SQL injection vulnerability in index2.php in Uiga Fan Club allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2012-2908

CVE-2012-2908—

Multiple SQL injection vulnerabilities in admin/bbcodes.php in Viscacha 0.8.1.1 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2012-2923

CVE-2012-2923—

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2744

CVE-2010-2744—

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows

23RISCO

abrir ↗

Referência

CVE-2012-5909

CVE-2012-5909—

SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-1294

CVE-2012-1294—

SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência

CVE-2012-1210

CVE-2012-1210—

SQL injection vulnerability in pfile/file.php in Powie pFile 1.02 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

CVE-2006-4210—webappsphp

nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to us

23RISCO

abrir ↗

Referência✓ VexDay Proof

Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection

CVE-2008-3185—webappsphp

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2015-7077

CVE-2015-7077—

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

Link Trader - 'lnkid' SQL Injection

CVE-2008-6102—webappsphp

SQL injection vulnerability in ratelink.php in Link Trader Script allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4809

CVE-2010-4809—

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2011-5195

CVE-2011-5195—

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference

23RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-0724

CVE-2010-0724—

SQL injection vulnerability in showimg.php in Arab Cart 1.0.2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

CVE-2006-3851—webappsphp

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2016-7637

CVE-2016-7637—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchO

23RISCO

abrir ↗

Referência

CVE-2012-0905

CVE-2012-0905—

SQL injection vulnerability in deV!L'z Clanportal (DZCP) Gamebase addon allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-2715

CVE-2009-2715—

Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.