Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.567 exploits

Referência

CVE-2026-5812

CVE-2026-5812MEDIUM

SourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic error

33RISCO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4207—webappsphp

Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

webid 0.5.4 - Multiple Vulnerabilities

CVE-2008-7117—webappsphp

eledicss.php in WeBid auction script 0.5.4 allows remote attackers to modify arbitrary cascading style sheets (CSS) file

23RISCO

abrir ↗

Referência

CVE-2010-1744

CVE-2010-1744—

SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2019-15253

CVE-2019-15253MEDIUM

Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

33RISCO

abrir ↗

Referência

CVE-2017-0287

CVE-2017-0287—

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RISCO

abrir ↗

Referência

CVE-2017-0289

CVE-2017-0289—

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RISCO

abrir ↗

Referência

CVE-2011-4807

CVE-2011-4807—

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência

CVE-2006-5191

CVE-2006-5191—

PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for

23RISCO

abrir ↗

Referência

CVE-2019-8390

CVE-2019-8390—

qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

38RISCO

abrir ↗

Referência

CVE-2019-13236

CVE-2019-13236—

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the man

23RISCO

abrir ↗

Referência

CVE-2019-8390

CVE-2019-8390—

qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

38RISCO

abrir ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2020-25820

CVE-2020-25820—

BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploade

28RISCO

abrir ↗

Referência

CVE-2018-14592

CVE-2018-14592—

The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 fo

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

SaveWeb Portal 3.4 - 'SITE_Path' Remote File Inclusion

CVE-2006-4012—webappsphp

Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion

CVE-2007-1165—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3425—webappsphp

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1651—webappsphp

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

gapicms 9.0.2 - 'dirDepth' Remote File Inclusion

CVE-2008-3183—webappsphp

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Random Ad 1.3 - Remote File Inclusion

CVE-2008-3401—webappsphp

PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2006-5192

CVE-2006-5192—

PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-12930

CVE-2017-12930—

SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users

23RISCO

abrir ↗

Referência

CVE-2020-25015

CVE-2020-25015—

A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally

23RISCO

abrir ↗

Referência

CVE-2021-31762

CVE-2021-31762—

Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users fea

23RISCO

abrir ↗

Referência✓ VexDay Proof

KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion

CVE-2006-6516—webappsphp

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2013-5954

CVE-2013-5954—

Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Referência

CVE-2018-18755

CVE-2018-18755—

K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/up

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.