Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2010-2846

CVE-2010-2846—

Cross-site scripting (XSS) vulnerability in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! al

23RISCO

abrir ↗

Referência

CVE-2015-10138

CVE-2015-10138CRITICAL

Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2015-10138

CVE-2015-10138CRITICAL

Work The Flow File Upload <= 2.5.2 - Arbitrary File Upload

63RISCO

abrir ↗

Referência

CVE-2014-9101

CVE-2014-9101—

Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (b

23RISCO

abrir ↗

Referência

CVE-2014-9101

CVE-2014-9101—

Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (b

23RISCO

abrir ↗

Referência

CVE-2014-9101

CVE-2014-9101—

Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall 1.7.0 (build 7907 and 7906) and SkaDate Lite 2.0 (b

23RISCO

abrir ↗

Referência✓ VexDay Proof

Boite de News 4.0.1 - 'index.php' Remote File Inclusion

CVE-2006-4123—webappsphp

PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAtm 1.21 - 'include_location' Remote File Inclusion

CVE-2006-4594—webappsphp

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remo

23RISCO

abrir ↗

Referência

CVE-2018-7203

CVE-2018-7203—

Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2018-7203

CVE-2018-7203—

Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2012-5908

CVE-2012-5908—

Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remo

23RISCO

abrir ↗

Referência

CVE-2012-2914

CVE-2012-2914—

Cross-site scripting (XSS) vulnerability in captchademo.php in Unijimpe Captcha allows remote attackers to inject arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProjectButler 0.8.4 - 'rootdir' Remote File Inclusion

CVE-2006-4205—webappsphp

Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 < 0.75 - 'e107language_e107cookie' Local File Inclusion

CVE-2006-5786—webappsphp

Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PH

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lanifex DMO 2.3b - '_incMgr' Remote File Inclusion

CVE-2006-4604—webappsphp

PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 Be

23RISCO

abrir ↗

Referência✓ VexDay Proof

AuraCMS 2.2 - Remote Add Administrator

CVE-2007-6552—webappsphp

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exero CMS 1.0.1 - 'theme' Multiple Local File Inclusions

CVE-2008-1409—webappsphp

Multiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote attackers to include a

23RISCO

abrir ↗

Referência✓ VexDay Proof

OtomiGen.x 2.2 - 'lang' Local File Inclusion

CVE-2008-2782—webappsphp

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

syzygyCMS 0.3 - 'index.php' Local File Inclusion

CVE-2008-3593—webappsphp

Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini-CMS 1.0.1 - 'index.php' Local File Inclusion

CVE-2008-5593—webappsphp

Multiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote attackers to include and execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

KTP Computer Customer Database CMS 1.0 - Local File Inclusion

CVE-2008-5953—webappsphp

Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling

CVE-2009-1504—webappsasp

Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by settin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1678—webappsphp

Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier all

23RISCO

abrir ↗

Referência

CVE-2017-16807

CVE-2017-16807—

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exist

23RISCO

abrir ↗

Referência

CVE-2017-16807

CVE-2017-16807—

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exist

23RISCO

abrir ↗

Referência

CVE-2009-2642

CVE-2009-2642—

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to

23RISCO

abrir ↗

Referência

CVE-2012-5912

CVE-2012-5912—

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2012-5912

CVE-2012-5912—

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2026-5316

CVE-2026-5316MEDIUM

Nothings stb stb_vorbis.c setup_free allocation of resources

33RISCO

abrir ↗

Referência

CVE-2019-10847

CVE-2019-10847—

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.