Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2012-10046

CVE-2012-10046CRITICAL

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

63RISCO

abrir ↗

Referência

CVE-2012-10046

CVE-2012-10046CRITICAL

E-Mail Security Virtual Appliance learn-msg.cgi Command Injection

63RISCO

abrir ↗

Referência

CVE-2017-14523

CVE-2017-14523—

WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NO

23RISCO

abrir ↗

Referência

CVE-2010-2858

CVE-2010-2858—

Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-2917

CVE-2010-2917—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2017-5881

CVE-2017-5881—

GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspeci

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simplog 0.9.2 - 's' Remote Command Execution

CVE-2006-0147—webappsphp

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple

28RISCO

abrir ↗

Referência

CVE-2010-1473

CVE-2010-1473—

Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker

38RISCO

abrir ↗

Referência

CVE-2010-1473

CVE-2010-1473—

Directory traversal vulnerability in the Advertising (com_advertising) component 0.25 for Joomla! allows remote attacker

38RISCO

abrir ↗

Referência

CVE-2009-4385

CVE-2009-4385—

Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4385

CVE-2009-4385—

Multiple cross-site request forgery (CSRF) vulnerabilities in Scriptsez.net Ez Poll Hoster (EPH) allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

X10media Mp3 Search Engine 1.5.5 - Remote File Inclusion

CVE-2008-4141—webappsphp

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

CVE-2008-4206—webappsphp

PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Gemini Portal 4.7 - 'lang' Remote File Inclusion

CVE-2008-4720—webappsphp

Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

ClamAV < 0.94.2 - JPEG Parsing Recursive Stack Overflow (PoC)

CVE-2008-5314—dosmultiple

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial

23RISCO

abrir ↗

Referência✓ VexDay Proof

Arab Portal 2.1 (Windows) - Remote File Disclosure

CVE-2008-5787—webappsphp

Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary fil

23RISCO

abrir ↗

Referência

CVE-2025-8730

CVE-2025-8730CRITICAL

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

48RISCO

abrir ↗

Referência

CVE-2009-4082

CVE-2009-4082—

PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earli

23RISCO

abrir ↗

Referência

CVE-2009-4082

CVE-2009-4082—

PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earli

23RISCO

abrir ↗

Referência

CVE-2010-1114

CVE-2010-1114—

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to exec

23RISCO

abrir ↗

Referência

CVE-2019-16197

CVE-2019-16197—

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document

23RISCO

abrir ↗

Referência

CVE-2010-0975

CVE-2010-0975—

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

CVE-2010-0975

CVE-2010-0975—

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

CVE-2010-1703

CVE-2010-1703—

Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo

23RISCO

abrir ↗

Referência

CVE-2010-1703

CVE-2010-1703—

Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo

23RISCO

abrir ↗

Referência

CVE-2015-6541

CVE-2015-6541—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) be

23RISCO

abrir ↗

Referência

CVE-2021-4462

CVE-2021-4462CRITICAL

Employee Records System v1.0 Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência

CVE-2010-1921

CVE-2010-1921—

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)

CVE-2008-1127—doswindows

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB (tmp_theme) 5.1.1 - Local File Inclusion

CVE-2008-1635—webappsphp

Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.