Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2014-10035

CVE-2014-10035—

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrat

23RISCO

abrir ↗

Referência

CVE-2018-7543

CVE-2018-7543—

Cross-site scripting (XSS) vulnerability in installer/build/view.step4.php of the SnapCreek Duplicator plugin 1.2.32 for

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpCMS 1.2.2 - 'file' Remote File Disclosure

CVE-2008-0513—webappsphp

Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to re

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component acctexp 0.12.x - Blind SQL Injection

CVE-2008-2632—webappsphp

SQL injection vulnerability in the acctexp (com_acctexp) component 0.12.x and earlier for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

XM Easy Personal FTP Server 1.0 - 'Port' Remote Overflow (PoC)

CVE-2006-2226—doswindows

Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of serv

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre News Manager 1.0 - 'id' SQL Injection

CVE-2006-2763—webappsphp

SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4026—webappsphp

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

CVE-2006-4607—webappsphp

admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting

23RISCO

abrir ↗

Referência

CVE-2026-65696

CVE-2026-65696MEDIUM

Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API

33RISCO

abrir ↗

Referência✓ VexDay Proof

Digital Eye CMS 0.1.1b - 'module.php' Remote File Inclusion

CVE-2007-1600—webappsphp

PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b) allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2006-2465

CVE-2006-2465—

Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if

23RISCO

abrir ↗

Referência✓ VexDay Proof

Censtore 7.3.x - 'censtore.cgi' Remote Command Execution

CVE-2006-1799—webappscgi

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

abrir ↗

Referência✓ VexDay Proof

NoAh 0.9 pre 1.2 - 'filepath' Remote File Disclosure

CVE-2007-6187—webappsphp

Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote at

23RISCO

abrir ↗

Referência

CVE-2014-8677

CVE-2014-8677—

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and

23RISCO

abrir ↗

Referência

CVE-2014-8677

CVE-2014-8677—

The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and

23RISCO

abrir ↗

Referência

CVE-2015-6945

CVE-2015-6945—

Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2017-7447

CVE-2017-7447—

HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP-Forum 1.7.4 - SQL Injection

CVE-2008-0388—webappsphp

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-1354

CVE-2010-1354—

Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0.1 for Joomla! allows remote attackers t

43RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2010-1360

CVE-2010-1360—

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência✓ VexDay Proof

I-Pos Internet Pay Online Store 1.3 Beta - SQL Injection

CVE-2008-2634—webappsasp

SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mini Web Calendar 1.2 - File Disclosure / Cross-Site Scripting

CVE-2008-5061—webappsphp

Cross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Konqueror 3.5.9 - 'load' Remote Crash

CVE-2008-5698—doslinux

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service (

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyKtools 2.4 - Arbitrary Database Backup

CVE-2008-6815—webappsphp

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rama CMS 0.9.8 - 'download.php' File Disclosure

CVE-2009-1768—webappsphp

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read a

23RISCO

abrir ↗

Referência

CVE-2009-3247

CVE-2009-3247—

Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2020-7108

CVE-2020-7108—

The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.

23RISCO

abrir ↗

Referência

CVE-2017-0214

CVE-2017-0214—

Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2

23RISCO

abrir ↗

Referência

CVE-2022-1388

CVE-2022-1388CRITICALsob ataqueransomware

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.