Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2020-7246

CVE-2020-7246—

A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code

60RISCO

abrir ↗

Referência

CVE-2021-47851

CVE-2021-47851CRITICAL

Mini Mouse 9.2.0 - Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2026-13503

CVE-2026-13503MEDIUM

antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal

33RISCO

abrir ↗

Referência

CVE-2010-4905

CVE-2010-4905—

SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2009-2640

CVE-2009-2640—

Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to exe

23RISCO

abrir ↗

Referência

CVE-2009-2640

CVE-2009-2640—

Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution

CVE-2008-4342—remotewindows

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used

28RISCO

abrir ↗

Referência

CVE-2017-13878

CVE-2017-13878—

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graph

23RISCO

abrir ↗

Referência

CVE-2014-0621

CVE-2014-0621—

Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Module HTMLArea3 1.5 - Remote File Inclusion

CVE-2006-3751—webappsphp

PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_html

23RISCO

abrir ↗

Referência✓ VexDay Proof

eReservations - Authentication Bypass

CVE-2009-0252—webappsasp

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

CVE-2009-1229—webappsphp

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the u

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection

CVE-2007-1962—webappsphp

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickEStore 8.2 - 'insertorder.cfm' SQL Injection

CVE-2007-3933—webappsphp

SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Real Estate - 'fullnews.php?id' SQL Injection

CVE-2007-6462—webappsphp

SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS 1.0.4.2 - 'Cuid' cookie Blind SQL Injection

CVE-2008-0734—webappsphp

SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2014-5453

CVE-2014-5453—

Ubisoft Uplay PC before 4.6.1.3217 use weak permissions (Everyone: Full Control) for the program installation directory

23RISCO

abrir ↗

Referência

CVE-2020-36885

CVE-2020-36885CRITICAL

Sony IPELA Network Camera 1.82.01 Remote Stack Buffer Overflow via ftpclient.cgi

48RISCO

abrir ↗

Referência

CVE-2023-54329

CVE-2023-54329CRITICAL

Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE)

48RISCO

abrir ↗

Referência

CVE-2009-4196

CVE-2009-4196—

Multiple cross-site scripting (XSS) vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T run

23RISCO

abrir ↗

Referência

CVE-2010-1078

CVE-2010-1078—

SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2021-33351

CVE-2021-33351CRITICAL

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allo

48RISCO

abrir ↗

Referência

CVE-2016-5847

CVE-2016-5847—

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard l

23RISCO

abrir ↗

Referência

CVE-2023-48901

CVE-2023-48901CRITICAL

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute

48RISCO

abrir ↗

Referência

CVE-2010-4782

CVE-2010-4782—

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allo

23RISCO

abrir ↗

Referência

CVE-2010-4782

CVE-2010-4782—

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

vBulletin Mod RPG Inferno 2.4 - 'inferno.php' SQL Injection

CVE-2007-3687—webappsphp

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module,

23RISCO

abrir ↗

Referência✓ VexDay Proof

FLDS 1.2a - 'lpro.php' SQL Injection

CVE-2008-5779—webappsphp

SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-2921

CVE-2010-2921—

SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

AskPert - Authentication Bypass

CVE-2008-6309—webappsphp

SQL injection vulnerability in index.php in W3matter AskPert allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.