Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

Gonafish LinksCaffePRO 4.5 - 'index.php' SQL Injection

CVE-2008-4202—webappsphp

SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2016-1102

CVE-2016-1102—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1102

CVE-2016-1102—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1103

CVE-2016-1103—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2016-1103

CVE-2016-1103—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

abrir ↗

Referência✓ VexDay Proof

CJ Ultra Plus 1.0.4 - Cookie SQL Injection

CVE-2008-4241—webappsphp

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Drinks Complete Website 2.1.0 - 'drinkid' SQL Injection

CVE-2008-5169—webappsphp

SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Easysitenetwork Jokes Complete Website 2.1.3 - 'jokeid' SQL Injection

CVE-2008-5174—webappsphp

SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Online Store 1 - 'cat_id' SQL Injection

CVE-2008-5802—webappsphp

SQL injection vulnerability in index.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Online Store 1 - Authentication Bypass

CVE-2008-5803—webappsphp

SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ HotScripts-like Site - 'cid' SQL Injection

CVE-2008-6243—webappsphp

SQL injection vulnerability in showcategory.php in Scripts For Sites (SFS) Hotscripts-like Site allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component MyContent 1.1.13 - Blind SQL Injection

CVE-2008-6430—webappsphp

SQL injection vulnerability in the MyContent (com_mycontent) component 1.1.13 for Joomla! allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Webshop 1.02 - Authentication Bypass

CVE-2008-6627—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Dir Submit - Authentication Bypass

CVE-2009-1787—webappsphp

Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attack

23RISCO

abrir ↗

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

abrir ↗

Referência

CVE-2020-7247

CVE-2020-7247CRITICALsob ataque

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

abrir ↗

Referência

CVE-2010-4186

CVE-2010-4186—

SQL injection vulnerability in process.asp in OnlineTechTools Online Work Order System (OWOS) Professional Edition 2.10

23RISCO

abrir ↗

Referência✓ VexDay Proof

Autodealers CMS AutOnline - 'id' SQL Injection

CVE-2008-4074—webappsphp

SQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2009-3002

CVE-2009-3002—

The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo

23RISCO

abrir ↗

Referência

CVE-2009-2328

CVE-2009-2328—

admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot

23RISCO

abrir ↗

Referência

CVE-2010-4913

CVE-2010-4913—

Cross-site scripting (XSS) vulnerability in the search feature in ColdGen ColdUserGroup 1.06 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebPortal CMS 0.7.4 - 'download.php' SQL Injection

CVE-2008-4345—webappsphp

SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2007-5817

CVE-2007-5817MEDIUM

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1

33RISCO

abrir ↗

Referência✓ VexDay Proof

Injader CMS 2.1.1 - 'id' SQL Injection

CVE-2008-5890—webappsphp

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2018-17775

CVE-2018-17775—

Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us

23RISCO

abrir ↗

Referência

CVE-2016-1287

CVE-2016-1287—

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0

45RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6881—webappsphp

Multiple SQL injection vulnerabilities in the Live Chat (com_livechat) component 1.0 for Joomla! allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-2234

CVE-2009-2234—

Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

LocazoList 2.01a beta5 - 'subcatID' SQL Injection

CVE-2007-0129—webappsasp

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.