Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2010-2656

CVE-2010-2656—

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before

23RISCO

abrir ↗

Referência✓ VexDay Proof

webEdition CMS - 'we_objectID' Blind SQL Injection

CVE-2008-4154—webappsphp

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

MatPo Link 1.2b - Blind SQL Injection / Cross-Site Scripting

CVE-2008-6607—webappsphp

Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

microTopic 1 - 'Rating' Blind SQL Injection

CVE-2009-1661—webappsphp

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Girlserv ads 1.5 - 'details_news.php' SQL Injection

CVE-2007-3583—webappsphp

SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vanilla 1.1.3 - Blind SQL Injection

CVE-2007-5643—webappsphp

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6.5 - Multiple SQL Injections

CVE-2007-6576—webappsphp

Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2020-25762

CVE-2020-25762—

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v

28RISCO

abrir ↗

Referência✓ VexDay Proof

Kolifa.net Download Script 1.2 - 'id' SQL Injection

CVE-2008-4054—webappsphp

SQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

CVE-2008-4889—webappsphp

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2010-2509

CVE-2010-2509—

Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar

23RISCO

abrir ↗

Referência

CVE-2016-0143

CVE-2016-0143—

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, W

23RISCO

abrir ↗

Referência

CVE-2016-3943

CVE-2016-3943—

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a

23RISCO

abrir ↗

Referência

CVE-2026-15233

CVE-2026-15233MEDIUM

Nested Pages < 3.2.15 - Editor+ Stored XSS via Post Title

33RISCO

abrir ↗

Referência✓ VexDay Proof

Pro Traffic One - 'poll_results.php' SQL Injection

CVE-2008-6214—webappsphp

SQL injection vulnerability in poll_results.php in Harlandscripts Pro Traffic One allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-4514

CVE-2010-4514—

Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-1336

CVE-2010-1336—

Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4517

CVE-2010-4517—

SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência

CVE-2010-2610

CVE-2010-2610—

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-2670

CVE-2010-2670—

SQL injection vulnerability in recipedetail.php in BrotherScripts Recipe Website allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2020-28351

CVE-2020-28351—

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a r

43RISCO

abrir ↗

Referência

CVE-2020-28688

CVE-2020-28688—

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

28RISCO

abrir ↗

Referência

CVE-2005-4416

CVE-2005-4416—

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2014-2043

CVE-2014-2043—

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows re

23RISCO

abrir ↗

Referência

CVE-2020-26629

CVE-2020-26629CRITICAL

A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows

48RISCO

abrir ↗

Referência

CVE-2026-18601

CVE-2026-18601CRITICAL

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection

48RISCO

abrir ↗

Referência

CVE-2026-73515

CVE-2026-73515HIGH

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.