Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion

CVE-2009-1498—webappsphp

Directory traversal vulnerability in inc/profilemain.php in Game Maker 2k Internet Discussion Boards (iDB) 0.2.5 Pre-Alp

23RISCO

abrir ↗

Referência

CVE-2009-2308

CVE-2009-2308—

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier fo

23RISCO

abrir ↗

Referência

CVE-2022-24637

CVE-2022-24637—

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh

60RISCO

abrir ↗

Referência

CVE-2022-24637

CVE-2022-24637—

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, wh

60RISCO

abrir ↗

Referência

CVE-2019-5825

CVE-2019-5825MEDIUMsob ataque

Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploi

90RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6511—webappsjsp

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arb

23RISCO

abrir ↗

Referência

CVE-2009-3334

CVE-2009-3334—

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload

CVE-2008-6513—webappsphp

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase (aphpkb) 0.92.9 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-8635

CVE-2017-8635—

Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve

35RISCO

abrir ↗

Referência

CVE-2018-0935

CVE-2018-0935—

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se

35RISCO

abrir ↗

Referência

CVE-2019-11708

CVE-2019-11708CRITICALsob ataque

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result

90RISCO

abrir ↗

Referência

CVE-2022-24706

CVE-2022-24706CRITICALsob ataque

Remote Code Execution Vulnerability in Packaging

100RISCO

abrir ↗

Referência

CVE-2019-7255

CVE-2019-7255—

Linear eMerge E3-Series devices allow XSS.

50RISCO

abrir ↗

Referência✓ VexDay Proof

VidiScript (Avatar) - Arbitrary File Upload

CVE-2008-6518—webappsphp

Unrestricted file upload vulnerability in the profile feature in VidiScript allows registered remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

Focus/SIS 1.0/2.2 - Remote File Inclusion

CVE-2007-4807—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência

CVE-2009-3343

CVE-2009-3343—

SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

GO4I.NET ASP Forum 1.0 - SQL Injection

CVE-2008-6527—webappsphp

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2023-41425

CVE-2023-41425MEDIUM

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2009-2400

CVE-2009-2400—

SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2022-24734

CVE-2022-24734HIGH

Remote code execution in mybb

78RISCO

abrir ↗

Referência

CVE-2022-24734

CVE-2022-24734HIGH

Remote code execution in mybb

78RISCO

abrir ↗

Referência

CVE-2019-19609

CVE-2019-19609—

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c

35RISCO

abrir ↗

Referência✓ VexDay Proof

TmaxSoft JEUS - Alternate Data Streams File Disclosure

CVE-2008-6528—remotewindows

NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to t

23RISCO

abrir ↗

Referência✓ VexDay Proof

PayPal eStore - Admin Password Change

CVE-2008-6535—webappsphp

admin/settings.php in PayPal eStores allows remote attackers to bypass intended access restrictions and change the admin

23RISCO

abrir ↗

Referência✓ VexDay Proof

Destar 0.2.2-5 - Arbitrary Add Admin

CVE-2008-6539—webappsphp

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ajax File Browser 3b - 'settings.inc.php?approot' Remote File Inclusion

CVE-2007-4921—webappsphp

PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attacker

35RISCO

abrir ↗

Referência✓ VexDay Proof

KwsPHP Module jeuxflash 1.0 - 'id' SQL Injection

CVE-2007-4922—webappsphp

SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

CVE-2007-4923—webappsphp

PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component f

35RISCO

abrir ↗

Referência

CVE-2026-16083

CVE-2026-16083MEDIUM

Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay

33RISCO

abrir ↗

Referência

CVE-2026-16082

CVE-2026-16082MEDIUM

Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.