Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

abrir ↗

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

abrir ↗

Referência

CVE-2013-4095

CVE-2013-4095—

plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 all

23RISCO

abrir ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2018-6411

CVE-2018-6411—

An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically

23RISCO

abrir ↗

Referência

CVE-2013-6246

CVE-2013-6246—

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens

23RISCO

abrir ↗

Referência

CVE-2026-41940

CVE-2026-41940CRITICALsob ataqueransomware

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

Referência

CVE-2015-0935

CVE-2015-0935—

Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to

28RISCO

abrir ↗

Referência✓ VexDay Proof

SazCart 1.5 - 'cart.php' Remote File Inclusion

CVE-2006-5727—webappsphp

PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2025-14879

CVE-2025-14879CRITICAL

Tenda WH450 HTTP Request onSSIDChange stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2014-4936

CVE-2014-4936—

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)

43RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - Remote File Inclusion

CVE-2007-1968—webappsphp

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISCO

abrir ↗

Referência

SoftExpert (SE) Suite v2.1.3 - Local File Inclusion

CVE-2023-30330CRITICALwebappsphp

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42

48RISCO

abrir ↗

Referência

CVE-2021-24275

CVE-2021-24275—

Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2017-2362

CVE-2017-2362—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

23RISCO

abrir ↗

Referência

CVE-2021-24276

CVE-2021-24276—

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2010-4480

CVE-2010-4480—

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site sc

23RISCO

abrir ↗

Referência

CVE-2018-10757

CVE-2018-10757—

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a

23RISCO

abrir ↗

Referência

CVE-2018-10757

CVE-2018-10757—

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a

23RISCO

abrir ↗

Referência

CVE-2015-2292

CVE-2015-2292—

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be

23RISCO

abrir ↗

Referência

CVE-2015-2292

CVE-2015-2292—

Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin be

23RISCO

abrir ↗

Referência

CVE-2014-2341

CVE-2014-2341—

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID

23RISCO

abrir ↗

Referência

CVE-2018-10260

CVE-2018-10260—

A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.

23RISCO

abrir ↗

Referência

CVE-2018-10260

CVE-2018-10260—

A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Avant Browser 11.0 build 26 - Remote Stack Overflow Crash

CVE-2007-1501—doswindows

Stack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a denial of service (crash)

23RISCO

abrir ↗

Referência✓ VexDay Proof

ViPlay3 < 3.00 - '.vpl' Local Stack Overflow (PoC)

CVE-2009-1660—doswindows

Stack-based buffer overflow in URUWorks ViPlay3 3.0 and earlier allows remote attackers to cause a denial of service (cr

23RISCO

abrir ↗

Referência

CVE-2010-2315

CVE-2010-2315—

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2009-3541

CVE-2009-3541—

PHP remote file inclusion vulnerability in CoupleDB.php in PHPGenealogy 2.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.