Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2026-10259

CVE-2026-10259HIGH

H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10258

CVE-2026-10258MEDIUM

itsourcecode Content Management System add_sub_topic.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10253

CVE-2026-10253MEDIUM

itsourcecode Online House Rental System manage_payment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10162

CVE-2026-10162HIGH

TRENDnet TEW-432BRP formSetPassword stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10157

CVE-2026-10157MEDIUM

Open5GS NGAP PathSwitchRequest Message ngap-handler.c improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10156

CVE-2026-10156MEDIUM

Open5GS nf-instances Endpoint nnrf-handler.c handle_amf_info resource consumption

33RISCO

abrir ↗

Referência

CVE-2026-10155

CVE-2026-10155MEDIUM

Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10153

CVE-2026-10153MEDIUM

westboy CicadasCMS AbstractCacheManager.java search cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10126

CVE-2026-10126HIGH

Edimax BR-6478AC POST Request formQoS buffer overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

Hpecs Shopping Cart - Remote Authentication Bypass

CVE-2006-5962—webappsasp

Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

CVE-2006-5976—webappsasp

Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-4680

CVE-2009-4680—

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Powies pForum 1.29a - 'editpoll.php' SQL Injection

CVE-2006-6038—webappsphp

SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

WORK System E-Commerce 3.0.1 - Remote File Inclusion

CVE-2006-6041—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other ver

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion

CVE-2006-6042—webappsphp

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Etomite CMS 0.6.1.2 - '/manager/index.php' Local File Inclusion

CVE-2006-6047—webappsphp

Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to

23RISCO

abrir ↗

Referência✓ VexDay Proof

XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow

CVE-2006-6063—localwindows

Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via

50RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module mx_tinies 1.3.0 - Remote File Inclusion

CVE-2006-6295—webappsphp

PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 all

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows - spoolss GetPrinterData() Remote Denial of Service

CVE-2006-6296—doswindows

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and

28RISCO

abrir ↗

Referência✓ VexDay Proof

F-Prot AntiVirus 4.6.6 - 'ACE' Denial of Service

CVE-2006-6352—doslinux

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure

CVE-2006-6380—webappsasp

Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência

CVE-2023-46805

CVE-2023-46805HIGHsob ataqueransomware

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

100RISCO

abrir ↗

Referência

CVE-2023-22527

CVE-2023-22527CRITICALsob ataqueransomware

A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated atta

100RISCO

abrir ↗

Referência

CVE-2026-10062

CVE-2026-10062HIGH

TRENDnet TEW-432BRP formSetRoute stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10061

CVE-2026-10061MEDIUM

TRENDnet TEW-432BRP formWPS command injection

33RISCO

abrir ↗

Referência

CVE-2026-10060

CVE-2026-10060MEDIUM

TRENDnet TEW-432BRP formSetRoute command injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

CVE-2006-6568—webappsphp

Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allow

23RISCO

abrir ↗

Referência

CVE-2009-4721

CVE-2009-4721—

Multiple SQL injection vulnerabilities in Admin/index.asp in Andrews-Web (A-W) BannerAd 1.0 allow remote attackers to ex

23RISCO

abrir ↗

Referência✓ VexDay Proof

yaplap 0.6.1b - 'ldap.php' Remote File Inclusion

CVE-2006-6575—webappsphp

PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 and

23RISCO

abrir ↗

Referência

CVE-2006-6576

CVE-2006-6576—

Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.