Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2012-5315

CVE-2012-5315—

Multiple cross-site scripting (XSS) vulnerabilities in php ireport 1.0 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2012-5322

CVE-2012-5322—

Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2008-6887

CVE-2008-6887—

SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2008-6898

CVE-2008-6898—

Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote

50RISCO

abrir ↗

Referência

CVE-2026-57521

CVE-2026-57521MEDIUM

Bitwarden Server < 2026.5.0 Broken Access Control via PreviewInvoiceController

33RISCO

abrir ↗

Referência✓ VexDay Proof

Getleft 1.2 - Remote Buffer Overflow (PoC)

CVE-2008-6897—dosmultiple

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência✓ VexDay Proof

SasCam WebCam Server 2.6.5 - ActiveX Remote Buffer Overflow

CVE-2008-6898—remotewindows

Buffer overflow in the XHTTP Module 4.1.0.0 in the ActiveX control for SaschArt SasCam Webcam Server 2.6.5 allows remote

50RISCO

abrir ↗

Referência✓ VexDay Proof

AvailScript Article Script - Arbitrary File Upload

CVE-2008-6900—webappsphp

Unrestricted file upload vulnerability in "Add Pen/Author Name" feature in addpen.php in AvailScript Article Script allo

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities

CVE-2008-6902—webappsphp

Unrestricted file upload vulnerability in upload_flyer.php in 2532designs 2532|Gigs 1.2.2 Stable allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BabbleBoard 1.1.6 - Cross-Site Request Forgery/Cookie Grabber

CVE-2008-6905—webappsphp

Cross-site request forgery (CSRF) vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to h

23RISCO

abrir ↗

Referência

CVE-2026-5305

CVE-2026-5305HIGH

Email Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSS

41RISCO

abrir ↗

Referência

CVE-2026-12799

CVE-2026-12799MEDIUM

BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-12796

CVE-2026-12796MEDIUM

BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration

33RISCO

abrir ↗

Referência

CVE-2026-12795

CVE-2026-12795MEDIUM

BerriAI litellm SSO Debug Flow ui_sso.py json.dumps missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-12788

CVE-2026-12788MEDIUM

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference

33RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Remote Authentication Bypass

CVE-2008-6907—webappsphp

Multiple SQL injection vulnerabilities in checkuser.php in 2532designs 2532|Gigs 1.2.2 Stable, when magic_quotes_gpc is

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zeeways Shaadi Clone 2.0 - Authentication Bypass (1)

CVE-2008-6912—webappsphp

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct

23RISCO

abrir ↗

Referência

CVE-2012-5388

CVE-2012-5388—

Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo

23RISCO

abrir ↗

Referência

CVE-2009-4578

CVE-2009-4578—

Cross-site scripting (XSS) vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptsFeed (SF) Recipes Listing Portal - Arbitrary File Upload

CVE-2008-6943—webappsphp

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptsFeed (SF) Auto Classifieds Software - Arbitrary File Upload

CVE-2008-6944—webappsphp

Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbi

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2026-7850

CVE-2026-7850MEDIUM

WP Magnific Popup <= 1.0 - Author+ Stored XSS via href Attribute

33RISCO

abrir ↗

Referência

CVE-2026-2604

CVE-2026-2604MEDIUM

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

33RISCO

abrir ↗

Referência

CVE-2026-49954

CVE-2026-49954HIGH

Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory

41RISCO

abrir ↗

Referência

CVE-2026-49953

CVE-2026-49953MEDIUM

Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set

33RISCO

abrir ↗

Referência

CVE-2016-20080

CVE-2016-20080MEDIUM

WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php

33RISCO

abrir ↗

Referência

CVE-2016-20078

CVE-2016-20078MEDIUM

WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php

33RISCO

abrir ↗

Referência

CVE-2016-20077

CVE-2016-20077MEDIUM

WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php

33RISCO

abrir ↗

Referência

CVE-2016-20076

CVE-2016-20076HIGH

WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.