Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2010-3134

CVE-2010-3134—

Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to

23RISCO

abrir ↗

Referência

CVE-2025-34024

CVE-2025-34024CRITICAL

Edimax EW-7438RPn Mini OS Command Injection via mp.asp

48RISCO

abrir ↗

Referência

AllMyGuests 0.4.1 - 'cfg_serverpath' Remote File Inclusion

CVE-2006-4993—

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2017-11548

CVE-2017-11548—

The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência

Mambo Component 'com_a6mambohelpdesk' 18RC1 - Remote File Inclusion

CVE-2006-3930—

PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlie

23RISCO

abrir ↗

Referência

PHP recommend 1.3 - Authentication Bypass / Remote File Inclusion / Code Injection

CVE-2009-1779—

PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

plusphp url shortening software 1.6 - Remote File Inclusion

CVE-2008-2480—

PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2018-9844

CVE-2018-9844—

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.

23RISCO

abrir ↗

Referência

Webfwlog 0.92 - 'debug.php' Remote File Disclosure

CVE-2007-0585—

include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain sour

23RISCO

abrir ↗

Referência

CVE-2019-17504

CVE-2019-17504—

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vuln

23RISCO

abrir ↗

Referência

CVE-2021-26078

CVE-2021-26078—

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before

23RISCO

abrir ↗

Referência

DoceboLms 2.0.5 - 'help.php' Remote File Inclusion

CVE-2006-2668—

Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência

Easynews 4.4.1 - 'admin.php' Authentication Bypass

CVE-2006-5412—

admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypas

23RISCO

abrir ↗

Referência

CVE-2019-12460

CVE-2019-12460—

Web Port 1.19.1 allows XSS via the /access/setup type parameter.

23RISCO

abrir ↗

Referência

CVE-2012-4344

CVE-2012-4344—

Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2022-3141

CVE-2022-3141—

Translatepress Multilinugal < 2.3.3 - Admin+ SQLi

23RISCO

abrir ↗

Referência

CVE-2012-2156

CVE-2012-2156—

Multiple cross-site scripting (XSS) vulnerabilities in Plume CMS 1.2.4 and earlier allow remote attackers to inject arbi

23RISCO

abrir ↗

Referência

CVE-2025-2749

CVE-2025-2749HIGHsob ataque

Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

71RISCO

abrir ↗

Referência

CVE-2021-31962

CVE-2021-31962CRITICAL

Kerberos AppContainer Security Feature Bypass Vulnerability

48RISCO

abrir ↗

Referência

BrudaGB 1.1 - '/admin/index.php' Remote File Inclusion

CVE-2006-5068—

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.

23RISCO

abrir ↗

Referência

BrudaNews 1.1 - '/admin/index.php' Remote File Inclusion

CVE-2006-5068—

PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.

23RISCO

abrir ↗

Referência

Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities

CVE-2008-5712—

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)

23RISCO

abrir ↗

Referência

CVE-2010-1431

CVE-2010-1431—

SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

Online Marriage Registration System 1.0 - 'searchdata' SQL Injection

CVE-2020-35151—

The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to

23RISCO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RISCO

abrir ↗

Referência

CVE-2016-5425

CVE-2016-5425—

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distribu

38RISCO

abrir ↗

Referência

CVE-2017-13849

CVE-2017-13849—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS be

23RISCO

abrir ↗

Referência

CVE-2011-0960

CVE-2011-0960—

Multiple SQL injection vulnerabilities in Cisco Unified Operations Manager (CUOM) before 8.6 allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2012-3485

CVE-2012-3485—

Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o

38RISCO

abrir ↗

Referência

CVE-2019-0732

CVE-2019-0732—

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Wind

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.