Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2010-1737

CVE-2010-1737—

PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when magic_quotes_gpc is disable

23RISCO

abrir ↗

Referência

CVE-2010-1737

CVE-2010-1737—

PHP remote file inclusion vulnerability in core/includes/gfw_smarty.php in Gallo 0.1.0, when magic_quotes_gpc is disable

23RISCO

abrir ↗

Referência

CVE-2010-1739

CVE-2010-1739—

SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

OTSCMS 2.1.3 - Multiple Remote File Inclusions

CVE-2006-5546—webappsphp

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPPeanuts 1.3 Beta - 'Inspect.php' Remote File Inclusion

CVE-2006-5948—webappsphp

PHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

EPNadmin 0.7 - 'constantes.inc.php' Remote File Inclusion

CVE-2006-5555—webappsphp

PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

pragmaMX Module Landkarten 2.1 (Windows) - Local File Inclusion

CVE-2007-1539—webappsphp

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to inclu

23RISCO

abrir ↗

Referência

CVE-2013-5672

CVE-2013-5672—

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2013-5672

CVE-2013-5672—

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow re

23RISCO

abrir ↗

Referência

CVE-2013-5977

CVE-2013-5977—

Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP

23RISCO

abrir ↗

Referência

CVE-2021-47923

CVE-2021-47923CRITICAL

OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie

48RISCO

abrir ↗

Referência

CVE-2023-2645

CVE-2023-2645CRITICAL

USR USR-G806 Web Management Page hard-coded password

48RISCO

abrir ↗

Referência

CVE-2018-8208

CVE-2018-8208—

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

23RISCO

abrir ↗

Referência

CVE-2021-47910

CVE-2021-47910MEDIUM

WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2017-15276

CVE-2017-15276—

OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAddressBook 2.11 - Multiple Local File Inclusions

CVE-2008-1492—webappsphp

Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Interact 2.4.1 - 'help.php' Local File Inclusion

CVE-2008-3384—webappsphp

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1

23RISCO

abrir ↗

Referência

CVE-2026-6113

CVE-2026-6113CRITICAL

Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection

48RISCO

abrir ↗

Referência✓ VexDay Proof

Natterchat 1.1 - Remote Authentication Bypass

CVE-2008-7047—webappsphp

NatterChat 1.1 allows remote attackers to bypass authentication and gain administrator privileges to read or delete room

23RISCO

abrir ↗

Referência

CVE-2026-6112

CVE-2026-6112CRITICAL

Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2019-14328

CVE-2019-14328—

The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.

23RISCO

abrir ↗

Referência

CVE-2010-0757

CVE-2010-0757—

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

CVE-2010-0757

CVE-2010-0757—

Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

CVE-2015-7259

CVE-2015-7259—

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid

23RISCO

abrir ↗

Referência

CVE-2014-1665

CVE-2014-1665—

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2014-1665

CVE-2014-1665—

Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-3899

CVE-2010-3899—

IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote w

23RISCO

abrir ↗

Referência

CVE-2020-25270

CVE-2020-25270—

PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, o

23RISCO

abrir ↗

Referência

CVE-2010-1739

CVE-2010-1739—

SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_flyspray < 1.0.1 - Remote File Disclosure

CVE-2006-6203—webappsphp

Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows re

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.