Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2008-5736

CVE-2008-5736—

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p

23RISCO

abrir ↗

Referência✓ VexDay Proof

myPHPNuke < 1.8.8_8rc2 - 'artid' SQL Injection

CVE-2008-4092—webappsphp

SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

LushiWarPlaner 1.0 - 'register.php' SQL Injection

CVE-2007-0864—webappsphp

SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2022-50919

CVE-2022-50919CRITICAL

Tdarr 2.00.15 - Command Injection

48RISCO

abrir ↗

Referência

CVE-2008-6101

CVE-2008-6101—

SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2008-6101

CVE-2008-6101—

SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2009-1225

CVE-2009-1225—

Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Banner Exchange Website - 'targetid' SQL Injection

CVE-2008-6101—webappsphp

SQL injection vulnerability in click.php in Adult Banner Exchange Website allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

ComicShout 2.8 - 'news_id' SQL Injection

CVE-2008-6425—webappsphp

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

GaziYapBoz Game Portal - 'kategori.asp' SQL Injection

CVE-2007-1410—webappsasp

SQL injection vulnerability in kategori.asp in GaziYapBoz Game Portal allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

RevokeBB 1.0 RC4 - Blind SQL Injection / Hash Retrieve

CVE-2007-3051—webappsphp

SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Invoices 2007 05 25 - 'index.php?submit' SQL Injection

CVE-2007-3430—webappsphp

SQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

eSyndiCat Directory Software - Multiple SQL Injections

CVE-2007-3811—webappsphp

Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) the

23RISCO

abrir ↗

Referência

CVE-2020-26887

CVE-2020-26887—

FRITZ!OS before 7.21 on FRITZ!Box devices allows a bypass of a DNS Rebinding protection mechanism.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Links Basic Edition - 'catid' SQL Injection

CVE-2007-3981—webappsphp

SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

CVE-2007-6498—webappsasp

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated user

23RISCO

abrir ↗

Referência

CVE-2010-4604

CVE-2010-4604—

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in

23RISCO

abrir ↗

Referência

CVE-2007-5180

CVE-2007-5180—

Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2019-25765

CVE-2019-25765HIGH

ASP-CMS SQL Injection via commentList.asp id Parameter

41RISCO

abrir ↗

Referência✓ VexDay Proof

Yblog 0.2.2.2 - Cross-Site Scripting / SQL Injection

CVE-2008-2669—webappsphp

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1)

23RISCO

abrir ↗

Referência

CVE-2026-4181

CVE-2026-4181CRITICAL

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-4184

CVE-2026-4184CRITICAL

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-4183

CVE-2026-4183CRITICAL

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISCO

abrir ↗

Referência

CVE-2018-18860

CVE-2018-18860—

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-

23RISCO

abrir ↗

Referência

CVE-2012-4877

CVE-2012-4877—

Cross-site request forgery (CSRF) vulnerability in controlcenter.php in FlatnuX CMS 2011 08.09.2 and earlier allows remo

23RISCO

abrir ↗

Referência

CVE-2018-12904

CVE-2018-12904—

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause

23RISCO

abrir ↗

Referência

CVE-2008-4142

CVE-2008-4142—

SQL injection vulnerability in article.php in E-Php CMS allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4205—webappsphp

SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2008-4157

CVE-2008-4157—

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.