Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

Vastal I-Tech Share Zone - 'id' SQL Injection

CVE-2008-4468—webappsphp

SQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Yourownbux 4.0 - 'cookie' SQL Injection

CVE-2008-4492—webappsphp

SQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MGM 0.95r2 - Remote File Inclusion

CVE-2006-3980—webappsphp

PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM)

23RISCO

abrir ↗

Referência

CVE-2026-9442

CVE-2026-9442HIGH

Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow

41RISCO

abrir ↗

Referência

CVE-2017-16781

CVE-2017-16781—

The installer in MyBB before 1.8.13 has XSS.

23RISCO

abrir ↗

Referência✓ VexDay Proof

YACS CMS 6.6.1 - context[path_to_root] Remote File Inclusion

CVE-2006-4532—webappsphp

PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS Frogss 0.4 - 'podpis' SQL Injection

CVE-2006-4536—webappsphp

SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2017-17575

CVE-2017-17575—

FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2026-12823

CVE-2026-12823MEDIUM

Browserbase Skills Autobrowse Trace Artifact default permission

33RISCO

abrir ↗

Referência

CVE-2017-20261

CVE-2017-20261HIGH

Joomla! Component Bargain Product VM3 1.0 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-20260

CVE-2017-20260HIGH

Joomla! Component Price Alert 3.0.2 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-20259

CVE-2017-20259HIGH

Joomla OSDownloads 1.7.4 SQL Injection via item view

41RISCO

abrir ↗

Referência

CVE-2017-20258

CVE-2017-20258HIGH

Joomla! Component RPC Responsive Portfolio 1.6.1 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2026-8981

CVE-2026-8981LOW

Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML

28RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

CVE-2026-11585

CVE-2026-11585MEDIUM

CodeAstro Student Attendance Management System createClassArms.php sql injection

33RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência✓ VexDay Proof

Libera CMS 1.12 - 'cookie' SQL Injection

CVE-2008-4700—webappsphp

SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Top Auction 1.0 - 'viewcat.php' SQL Injection

CVE-2005-3952—webappsphp

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência

CVE-2026-8777

CVE-2026-8777MEDIUM

Edimax BR-6428NS POST Request formStaDrvSetup command injection

33RISCO

abrir ↗

Referência

CVE-2026-8776

CVE-2026-8776HIGH

Edimax BR-6428NS POST Request formPPTPSetup buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7315

CVE-2026-7315MEDIUM

eiceblue spire-pdf-mcp-server PDF File server.py get_pdf_path path traversal

33RISCO

abrir ↗

Referência

CVE-2026-16979

CVE-2026-16979MEDIUM

SmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key Enumeration

33RISCO

abrir ↗

Referência✓ VexDay Proof

BosNews 4.0 - 'article' SQL Injection

CVE-2008-4703—webappsphp

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

My PHP Dating - 'id' SQL Injection

CVE-2008-4705—webappsphp

SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Pizza - 'manufacturers_id' SQL Injection

CVE-2008-5046—webappsphp

SQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2016-3081

CVE-2016-3081—

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, a

60RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Rental Script - Authentication Bypass

CVE-2008-5047—webappsphp

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Anti-Keylogger Elite 3.3.0 - 'AKEProtect.sys' Local Privilege Escalation

CVE-2008-5049—localwindows

Buffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and possibly other version

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.