Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Yahoo! Messenger 8.1.0.421 - CYFT Object Arbitrary File Download

CVE-2007-5017—remotewindows

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Fantasy Football League (OFFL) 0.2.6 - 'teams.php' SQL Injection

CVE-2008-2890—webappsphp

Multiple SQL injection vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 and earlier allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência✓ VexDay Proof

emuCMS 0.3 - 'cat_id' SQL Injection

CVE-2008-2891—webappsphp

SQL injection vulnerability in index.php in eMuSOFT emuCMS 0.3 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Calendar Script 1.1 - Insecure Cookie Handling

CVE-2008-5738—webappsphp

Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by s

23RISCO

abrir ↗

Referência

CVE-2010-2622

CVE-2010-2622—

SQL injection vulnerability in the Joomanager component, possibly 1.1.1, for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2017-14219

CVE-2017-14219—

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre

23RISCO

abrir ↗

Referência

CVE-2026-58460

CVE-2026-58460HIGH

react-native-receive-sharing-intent Path Traversal via _display_name

41RISCO

abrir ↗

Referência

CVE-2026-58467

CVE-2026-58467HIGH

Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php

41RISCO

abrir ↗

Referência

CVE-2026-59102

CVE-2026-59102LOW

Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering

28RISCO

abrir ↗

Referência

CVE-2026-59100

CVE-2026-59100LOW

LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations

28RISCO

abrir ↗

Referência

CVE-2026-59099

CVE-2026-59099CRITICAL

Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

48RISCO

abrir ↗

Referência✓ VexDay Proof

PPA Gallery 1.0 - 'functions.inc.php' Remote File Inclusion

CVE-2006-5165—webappsphp

PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote at

23RISCO

abrir ↗

Referência✓ VexDay Proof

Docebo 3.5.0.3 - 'lib.regset.php' Command Execution

CVE-2008-7154—webappsphp

Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/cla

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentFlux 2.2 - 'maketorrent.php' Remote Command Execution

CVE-2006-6599—webappsphp

maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência

CVE-2025-10353

CVE-2025-10353CRITICAL

Missing Authorization vulnerability in Melis Platform

63RISCO

abrir ↗

Referência✓ VexDay Proof

project alumni 1.0.9 - 'index.php?act' Local File Inclusion

CVE-2007-6184—webappsphp

Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mega File Hosting Script 1.2 - 'url' Remote File Inclusion

CVE-2009-0966—webappsphp

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Power Editor 2.0 - Remote File Disclosure / Edit

CVE-2008-2116—webappsphp

Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to r

23RISCO

abrir ↗

Referência✓ VexDay Proof

AJ HYIP ACME - 'news.php' SQL Injection

CVE-2008-2893—webappsphp

SQL injection vulnerability in news.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-2684

CVE-2010-2684—

SQL injection vulnerability in index.php in Customer Paradigm PageDirector CMS allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-0971

CVE-2010-0971—

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor pr

23RISCO

abrir ↗

Referência

CVE-2010-0971

CVE-2010-0971—

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor pr

23RISCO

abrir ↗

Referência

CVE-2026-58126

CVE-2026-58126CRITICAL

PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

48RISCO

abrir ↗

Referência

CVE-2010-2688

CVE-2010-2688—

SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Password Protector SD 1.3.1 - Insecure Cookie Handling

CVE-2009-2003—webappsphp

Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative acce

23RISCO

abrir ↗

Referência

CVE-2007-5816

CVE-2007-5816—

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by maki

23RISCO

abrir ↗

Referência

CVE-2014-5101

CVE-2014-5101—

Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

Top Auction 1.0 - 'viewcat.php' SQL Injection

CVE-2005-3952—webappsphp

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion

CVE-2009-2081—webappsphp

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.