Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.797 exploits

Referência

CVE-2017-7183

CVE-2017-7183—

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large

23RISCO

abrir ↗

Referência✓ VexDay Proof

Advanced Webhost Billing System (AWBS) 2.4.0 - 'cart2.php' Remote File Inclusion

CVE-2007-2272—webappsphp

PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0

23RISCO

abrir ↗

Referência

CVE-2009-3019

CVE-2009-3019—

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to ca

28RISCO

abrir ↗

Referência

CVE-2017-7183

CVE-2017-7183—

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large

23RISCO

abrir ↗

Referência

CVE-2018-16606

CVE-2018-16606—

In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted paper

23RISCO

abrir ↗

Referência

CVE-2009-3531

CVE-2009-3531—

SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft FoxServer - 'vfp6r.dll 6.0.8862.0' ActiveX Command Execution

CVE-2008-0236—remotewindows

An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary comma

28RISCO

abrir ↗

Referência

CVE-2009-3534

CVE-2009-3534—

Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

PhpAddEdit 1.3 - 'cookie' Authentication Bypass

CVE-2008-6581—webappsphp

23RISCO

abrir ↗

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

abrir ↗

Referência

CVE-2021-24155

CVE-2021-24155—

Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

60RISCO

abrir ↗

Referência

CVE-2013-4095

CVE-2013-4095—

plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 all

23RISCO

abrir ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2018-6411

CVE-2018-6411—

An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically

23RISCO

abrir ↗

Referência

CVE-2013-6246

CVE-2013-6246—

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens

23RISCO

abrir ↗

Referência

CVE-2026-41940

CVE-2026-41940CRITICALsob ataqueransomware

WebPros cPanel and WHM Authentication Bypass via Login Flow

100RISCO

abrir ↗

Referência

CVE-2015-0935

CVE-2015-0935—

Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to

28RISCO

abrir ↗

Referência✓ VexDay Proof

SazCart 1.5 - 'cart.php' Remote File Inclusion

CVE-2006-5727—webappsphp

PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2025-14879

CVE-2025-14879CRITICAL

Tenda WH450 HTTP Request onSSIDChange stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2014-4936

CVE-2014-4936—

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)

43RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - Remote File Inclusion

CVE-2007-1968—webappsphp

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISCO

abrir ↗

Referência

SoftExpert (SE) Suite v2.1.3 - Local File Inclusion

CVE-2023-30330CRITICALwebappsphp

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42

48RISCO

abrir ↗

Referência

CVE-2021-24275

CVE-2021-24275—

Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2017-2362

CVE-2017-2362—

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS

23RISCO

abrir ↗

Referência

CVE-2021-24276

CVE-2021-24276—

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

43RISCO

abrir ↗

Referência

CVE-2010-4480

CVE-2010-4480—

error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site sc

23RISCO

abrir ↗

Referência

CVE-2018-10757

CVE-2018-10757—

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a

23RISCO

abrir ↗

Referência

CVE-2018-10757

CVE-2018-10757—

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.