Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2014-3136

CVE-2014-3136—

Cross-site request forgery (CSRF) vulnerability in D-Link DWR-113 (Rev. Ax) with firmware before 2.03b02 allows remote a

23RISCO

abrir ↗

Referência

CVE-2018-6940

CVE-2018-6940—

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote

23RISCO

abrir ↗

Referência

CVE-2018-6940

CVE-2018-6940—

A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote

23RISCO

abrir ↗

Referência

php-fusion 9.03.50 - Persistent Cross-Site Scripting

CVE-2020-12706—webappsphp

Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web scrip

23RISCO

abrir ↗

Referência✓ VexDay Proof

CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

CVE-2006-5400—webappsphp

PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyCMS 0.9.8 - Remote Command Execution (1)

CVE-2007-3587—webappsphp

MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Stats 0.1.9.2 - Multiple Vulnerabilities

CVE-2007-5452—webappsphp

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

xeCMS 1.x - 'view.php' Remote File Disclosure

CVE-2007-6508—webappsphp

Directory traversal vulnerability in view.php in xeCMS 1.0 allows remote attackers to read arbitrary files via a ..%2F (

23RISCO

abrir ↗

Referência

CVE-2018-0745

CVE-2018-0745—

The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an infor

23RISCO

abrir ↗

Referência

CVE-2023-28293

CVE-2023-28293HIGH

Windows Kernel Elevation of Privilege Vulnerability

41RISCO

abrir ↗

Referência

CVE-2012-5905

CVE-2012-5905—

Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long string

23RISCO

abrir ↗

Referência

CVE-2012-5905

CVE-2012-5905—

Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long string

23RISCO

abrir ↗

Referência

CVE-2013-5099

CVE-2013-5099—

Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote at

23RISCO

abrir ↗

Referência

CVE-2019-1344

CVE-2019-1344—

An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memo

23RISCO

abrir ↗

Referência✓ VexDay Proof

CPCommerce 1.1.0 - Cross-Site Scripting / Local File Inclusion

CVE-2008-1906—webappsphp

Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2014-4511

CVE-2014-4511—

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RISCO

abrir ↗

Referência

CVE-2026-15597

CVE-2026-15597MEDIUM

SourceCodester Class and Exam Timetabling System edit_exam2.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities

CVE-2007-6311—webappsphp

SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme RC4 10.9.2007 allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

aflog 1.01 - Multiple Insecure Cookie Handling Vulnerabilities

CVE-2008-4784—webappsphp

aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a c

23RISCO

abrir ↗

Referência

CVE-2026-15559

CVE-2026-15559MEDIUM

CodeAstro Simple Online Leave Management System POST accept.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15558

CVE-2026-15558MEDIUM

CodeAstro Simple Online Leave Management System deletemp.php sql injection

33RISCO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2009-4627

CVE-2009-4627—

Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Insecure Cookie Handling

CVE-2008-4244—webappsphp

Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the us

23RISCO

abrir ↗

Referência

CVE-2017-15972

CVE-2017-15972—

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php

23RISCO

abrir ↗

Referência

CVE-2017-15972

CVE-2017-15972—

SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php

23RISCO

abrir ↗

Referência

CVE-2006-4611

CVE-2006-4611—

Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2020-14073

CVE-2020-14073—

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Internet Explorer (Windows Vista) - XML Parsing Buffer Overflow

CVE-2008-4844—remotewindows

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet

50RISCO

abrir ↗

Referência

CVE-2021-25679

CVE-2021-25679—

The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. T

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.