Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência✓ VexDay Proof

JobSitePro 1.0 - 'search.php' SQL Injection

CVE-2007-1428—webappsphp

SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptMagix Photo Rating 2.0 - SQL Injection

CVE-2007-1619—webappsphp

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Camportail 1.1 - 'camid' SQL Injection

CVE-2007-1808—webappsphp

SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

SimpNews 2.40.01 - 'newnr' SQL Injection

CVE-2007-2750—webappsphp

SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easybe 1-2-3 Music Store - 'process.php' SQL Injection

CVE-2007-3520—webappsphp

SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

GameSiteScript 3.1 - profile id SQL Injection

CVE-2007-3631—webappsphp

SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Realtor 747 - 'index.php?categoryId' SQL Injection

CVE-2007-3810—webappsphp

SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_gmaps 1.00 - 'mapId' SQL Injection

CVE-2007-4128—webappsphp

SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-Blog 2.0 - Cross-Site Scripting / SQL Injection

CVE-2008-0676—webappsphp

Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência

CVE-2016-9151

CVE-2016-9151—

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0

23RISCO

abrir ↗

Referência

CVE-2016-9151

CVE-2016-9151—

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0

23RISCO

abrir ↗

Referência

CVE-2008-2633

CVE-2008-2633—

Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac

23RISCO

abrir ↗

Referência

CVE-2010-4406

CVE-2010-4406—

Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência

CVE-2015-4685

CVE-2015-4685—

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p

23RISCO

abrir ↗

Referência

CVE-2015-4685

CVE-2015-4685—

Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain p

23RISCO

abrir ↗

Referência

CVE-2022-43138

CVE-2022-43138CRITICAL

Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.

48RISCO

abrir ↗

Referência

CVE-2020-12882

CVE-2020-12882—

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a

23RISCO

abrir ↗

Referência

CVE-2014-8728

CVE-2014-8728—

SQL injection vulnerability in the login page (login/login) in Subex ROC Fraud Management (aka Fraud Management System a

23RISCO

abrir ↗

Referência

CVE-2014-100012

CVE-2014-100012—

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i

23RISCO

abrir ↗

Referência

CVE-2026-19767

CVE-2026-19767MEDIUM

itsourcecode Hospital Management System viewdoctortimings.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-19765

CVE-2026-19765MEDIUM

eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2010-2656

CVE-2010-2656—

The IBM BladeCenter with Advanced Management Module (AMM) firmware build ID BPET48L, and possibly other versions before

23RISCO

abrir ↗

Referência✓ VexDay Proof

webEdition CMS - 'we_objectID' Blind SQL Injection

CVE-2008-4154—webappsphp

SQL injection vulnerability in living-e webEdition CMS allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência✓ VexDay Proof

MatPo Link 1.2b - Blind SQL Injection / Cross-Site Scripting

CVE-2008-6607—webappsphp

Cross-site scripting (XSS) vulnerability in view.php in MatPo Link 1.2 Beta allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

microTopic 1 - 'Rating' Blind SQL Injection

CVE-2009-1661—webappsphp

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magic_quotes_gpc is disabled, allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Girlserv ads 1.5 - 'details_news.php' SQL Injection

CVE-2007-3583—webappsphp

SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Vanilla 1.1.3 - Blind SQL Injection

CVE-2007-5643—webappsphp

Multiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Adult Script 1.6.5 - Multiple SQL Injections

CVE-2007-6576—webappsphp

Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2020-25762

CVE-2020-25762—

An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input v

28RISCO

abrir ↗

Referência

CVE-2010-1600

CVE-2010-1600—

SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attacker

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.