Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2017-14075

CVE-2017-14075—

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must

23RISCO

abrir ↗

Referência✓ VexDay Proof

ECShop 2.5.0 - 'order_sn' SQL Injection

CVE-2009-1622—webappsphp

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2016-10045

CVE-2016-10045—

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

60RISCO

abrir ↗

Referência

CVE-2016-10045

CVE-2016-10045—

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

60RISCO

abrir ↗

Referência

CVE-2016-10045

CVE-2016-10045—

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

60RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component MiniBB 1.5a - Remote File Inclusion

CVE-2006-3690—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

IRSR 0.2 - '_sysSessionPath' Remote File Inclusion

CVE-2006-4237—webappsphp

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

WGCC 0.5.6b - 'quiz.php' SQL Injection

CVE-2006-5514—webappsphp

SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attack

23RISCO

abrir ↗

Referência

CVE-2009-2892

CVE-2009-2892—

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-0948

CVE-2010-0948—

SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0948

CVE-2010-0948—

SQL injection vulnerability in profil.php in Bigforum 4.5, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-3207

CVE-2010-3207—

SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-3207

CVE-2010-3207—

SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-4799

CVE-2010-4799—

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2010-4799

CVE-2010-4799—

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2009-4351

CVE-2009-4351—

SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote

23RISCO

abrir ↗

Referência

CVE-2015-7108

CVE-2015-7108—

The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of serv

23RISCO

abrir ↗

Referência

CVE-2016-10045

CVE-2016-10045—

The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman

60RISCO

abrir ↗

Referência

CVE-2017-14083

CVE-2017-14083—

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d

23RISCO

abrir ↗

Referência

CVE-2017-14083

CVE-2017-14083—

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d

23RISCO

abrir ↗

Referência✓ VexDay Proof

Article Friendly Pro/Standard - SQL Injection

CVE-2008-3670—webappsphp

SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

WTcom 0.2.4-alpha - 'torrents.php' SQL Injection

CVE-2006-4238—webappsphp

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2010-4856

CVE-2010-4856—

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection

CVE-2008-6250—webappsphp

SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting

CVE-2020-29475—webappsmultiple

nopCommerce Store 4.30 is affected by cross-site scripting (XSS) in the Schedule tasks name field. This vulnerability ca

23RISCO

abrir ↗

Referência✓ VexDay Proof

Def-Blog 1.0.3 - 'comadd.php' SQL Injection

CVE-2006-5383—webappsphp

SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webdrivers Simple Forum - 'message_details.php' SQL Injection

CVE-2006-5802—webappsphp

SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPNuke 0.80 - 'register.asp' SQL Injection

CVE-2006-6070—webappsasp

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

NewsLetter MX 1.0.2 - 'ID' SQL Injection

CVE-2006-6787—webappsasp

SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-4182

CVE-2026-4182CRITICAL

D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.