Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2009-2305

CVE-2009-2305—

The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //

23RISCO

abrir ↗

Referência

CVE-2018-11404

CVE-2018-11404—

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência

CVE-2026-5311

CVE-2026-5311MEDIUM

D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

33RISCO

abrir ↗

Referência

CVE-2026-5310

CVE-2026-5310LOW

Enter Software Iperius Backup IperiusAccounts.ini hard-coded key

28RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2023-5212

CVE-2023-5212CRITICAL

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

48RISCO

abrir ↗

Referência

CVE-2017-17631

CVE-2017-17631—

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.

23RISCO

abrir ↗

Referência

SMA-DB 0.3.13 - Multiple Remote File Inclusions

CVE-2009-1452—

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execut

23RISCO

abrir ↗

Referência

WebPortal CMS 0.8b - Multiple Local/Remote File Inclusions

CVE-2009-1444—

PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2009-4220

CVE-2009-4220—

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2009-4220

CVE-2009-4220—

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote

23RISCO

abrir ↗

Referência

FdWeB Espace Membre 2.01 - 'path' Remote File Inclusion

CVE-2007-0301—

PHP remote file inclusion vulnerability in _admin/admin_menu.php in FdWeB Espace Membre 2.1 and earlier allows remote at

23RISCO

abrir ↗

Referência

XNova 0.8 sp1 - 'xnova_root_path' Remote File Inclusion

CVE-2008-6023—

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in a newer version of Xnova, possibly 0.8 sp1,

23RISCO

abrir ↗

Referência

CVE-2009-4604

CVE-2009-4604—

PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0

23RISCO

abrir ↗

Referência

CVE-2009-4604

CVE-2009-4604—

PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0

23RISCO

abrir ↗

Referência

XNova 0.8 sp1 - 'xnova_root_path' Remote File Inclusion

CVE-2008-6022—

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1,

23RISCO

abrir ↗

Referência

CVE-2009-4553

CVE-2009-4553—

Stack-based buffer overflow in iRehearse allows remote attackers to cause a denial of service (application crash) or pos

23RISCO

abrir ↗

Referência

CVE-2014-9344

CVE-2014-9344—

Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authe

23RISCO

abrir ↗

Referência

Motorola Wimax modem CPEi300 - File Disclosure / Cross-Site Scripting

CVE-2009-0392—

Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to re

23RISCO

abrir ↗

Referência

WholeHogSoftware Ware Support - Authentication Bypass

CVE-2009-0458—

Multiple SQL injection vulnerabilities in admin/login_submit.php in Whole Hog Ware Support 1.x allow remote attackers to

23RISCO

abrir ↗

Referência

Expow 0.8 - 'autoindex.php?cfg_file' Remote File Inclusion

CVE-2007-2302—

PHP remote file inclusion vulnerability in autoindex.php in Expow 0.8 allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência

Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion

CVE-2007-0314—

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2023-33148

CVE-2023-33148HIGH

Microsoft Office Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Referência

CVE-2023-33148

CVE-2023-33148HIGH

Microsoft Office Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Referência

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

CVE-2007-3136—

PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute

23RISCO

abrir ↗

Referência

AllMyVisitors 0.4.0 - 'index.php' Remote File Inclusion

CVE-2007-0170—

PHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

Mutant 0.9.2 - 'mutant_functions.php' Remote File Inclusion

CVE-2007-1961—

PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.