Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência✓ VexDay Proof

ASPired2Quote - Remote Database Disclosure

CVE-2008-5885—webappsasp

The Net Guys ASPired2Quote stores sensitive information under the web root with insufficient access control, which allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Discussion Web 4 - Remote Database Disclosure

CVE-2008-5886—webappsasp

TAKempis Discussion Web 4.0 stores sensitive information under the web root with insufficient access control, which allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_registration_detailed 4.1 - Remote File Inclusion

CVE-2006-5254—webappsphp

PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration (

23RISCO

abrir ↗

Referência✓ VexDay Proof

Click&Rank - SQL Injection / Cross-Site Scripting

CVE-2008-5888—webappsasp

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id

23RISCO

abrir ↗

Referência✓ VexDay Proof

4Images 1.7.x - 'search.php' SQL Injection

CVE-2006-5236—webappsphp

SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL co

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche Directory - Database Disclosure

CVE-2008-5898—webappsasp

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows r

23RISCO

abrir ↗

Referência

CVE-2017-3195

CVE-2017-3195—

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack

28RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche FreeForAll - Database Disclosure

CVE-2008-5899—webappsasp

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion

CVE-2006-5256—webappsphp

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

CodeAvalanche Articles - Database Disclosure

CVE-2008-5900—webappsasp

CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, which allows re

23RISCO

abrir ↗

Referência

CVE-2018-25324

CVE-2018-25324MEDIUM

Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath

33RISCO

abrir ↗

Referência

CVE-2017-3248

CVE-2017-3248—

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISCO

abrir ↗

Referência✓ VexDay Proof

Free Directory Script 1.1.1 - 'API_HOME_DIR' Remote File Inclusion

CVE-2008-6305—webappsphp

PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Link Back Checker 1 - Insecure Cookie Handling

CVE-2008-6307—webappsphp

E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

E Annu 1.0 - Authentication Bypass / SQL Injection

CVE-2006-5666—webappsphp

SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

CVE-2008-6308—webappsphp

Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote

23RISCO

abrir ↗

Referência

CVE-2026-7238

CVE-2026-7238MEDIUM

code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-7237

CVE-2026-7237MEDIUM

AgiFlow scaffold-mcp write-to-file Tool index.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7235

CVE-2026-7235MEDIUM

ErlichLiu claude-agent-sdk-master route.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7234

CVE-2026-7234MEDIUM

BrowserOperator browser-operator-core server.js startsWith path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7233

CVE-2026-7233MEDIUM

Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds

33RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin BLOG Engine 2.1.4 - SQL Injection

CVE-2008-6438—webappsphp

SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

e107 Plugin BLOG Engine 2.2 - 'uid' Blind SQL Injection

CVE-2008-6438—webappsphp

SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows re

23RISCO

abrir ↗

Referência

CVE-2026-7099

CVE-2026-7099HIGH

Tenda F456 httpd QuickIndex formQuickIndex buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7093

CVE-2026-7093MEDIUM

code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7092

CVE-2026-7092MEDIUM

code-projects Invoice System in Laravel Profile profile improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7091

CVE-2026-7091MEDIUM

code-projects Invoice System in Laravel User Management user improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7090

CVE-2026-7090MEDIUM

code-projects Chat System send_message.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7089

CVE-2026-7089MEDIUM

code-projects Home Service System Appointment Booking booking.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7088

CVE-2026-7088MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.