Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.559exploits catalogados

34.978CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2009-4088

CVE-2009-4088—

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-4088

CVE-2009-4088—

Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-3561

CVE-2009-3561—

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full

23RISCO

abrir ↗

Referência

CVE-2009-5141

CVE-2009-5141—

Format string vulnerability in War FTP Daemon (warftpd) 1.82 RC 12 allows remote authenticated users to cause a denial o

23RISCO

abrir ↗

Referência

CVE-2019-1262

CVE-2019-1262—

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

23RISCO

abrir ↗

Referência

CVE-2009-5019

CVE-2009-5019—

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2009-5019

CVE-2009-5019—

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2009-5019

CVE-2009-5019—

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2015-4039

CVE-2015-4039—

Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authent

23RISCO

abrir ↗

Referência

CVE-2025-7795

CVE-2025-7795HIGH

Tenda FH451 P2pListFilter fromP2pListFilter stack-based overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

Aj Classifieds - Authentication Bypass

CVE-2008-7041—webappsphp

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request t

23RISCO

abrir ↗

Referência

CVE-2013-7382

CVE-2013-7382—

VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for t

23RISCO

abrir ↗

Referência✓ VexDay Proof

Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion

CVE-2007-0591—webappsphp

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Black Ice Software Inc Barcode SDK - 'BIDIB.ocx' Multiple Vulnerabilities

CVE-2008-2683—remotewindows

The BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows remote attackers to for

50RISCO

abrir ↗

Referência✓ VexDay Proof

Flux CMS 1.5.0 - 'loadsave.php' Arbitrary File Overwrite

CVE-2008-2686—webappsphp

webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overw

23RISCO

abrir ↗

Referência

CVE-2010-1372

CVE-2010-1372—

SQL injection vulnerability in the HD FLV Player (com_hdflvplayer) component 1.3 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-21371

CVE-2022-21371HIGH

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported ve

78RISCO

abrir ↗

Referência

CVE-2010-1267

CVE-2010-1267—

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência

CVE-2010-1267

CVE-2010-1267—

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência

CVE-2009-4698

CVE-2009-4698—

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-4698

CVE-2009-4698—

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

asp-project 1.0 - Insecure Cookie Method

CVE-2009-0280—webappsasp

Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

RealPlayer 11 - '.au' Denial of Service

CVE-2007-6235—doswindows

A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (applicatio

23RISCO

abrir ↗

Referência✓ VexDay Proof

AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure

CVE-2008-0091—webappsphp

Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arb

23RISCO

abrir ↗

Referência

CVE-2009-4700

CVE-2009-4700—

Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

IDM-OS 1.0 - 'Filename' File Disclosure

CVE-2008-0431—webappsphp

Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to re

23RISCO

abrir ↗

Referência

CVE-2009-0640

CVE-2009-0640—

Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-3205—webappsphp

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

PAD Site Scripts 3.6 - Insecure Cookie Handling

CVE-2009-1739—webappsphp

PAD Site Scripts 3.6 allows remote attackers to bypass authentication and gain privileges as other users, including admi

23RISCO

abrir ↗

Referência✓ VexDay Proof

BbZL.php 0.92 - Insecure Cookie Handling

CVE-2008-4708—webappsphp

BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_admi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.