Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2015-5999

CVE-2015-5999—

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2

23RISCO

abrir ↗

Referência

CVE-2015-5999

CVE-2015-5999—

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2

23RISCO

abrir ↗

Referência

CVE-2026-16063

CVE-2026-16063MEDIUM

Event Booking Manager for WooCommerce < 5.3.7 - Author+ Stored XSS via Event Timeline Content

33RISCO

abrir ↗

Referência

CVE-2019-1010124

CVE-2019-1010124—

WebAppick WooCommerce Product Feed 2.2.18 and earlier is affected by: Cross Site Scripting (XSS). The impact is: XSS to

23RISCO

abrir ↗

Referência

CVE-2018-17376

CVE-2018-17376—

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter

23RISCO

abrir ↗

Referência

CVE-2018-6947

CVE-2018-6947—

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoM

23RISCO

abrir ↗

Referência

CVE-2018-6947

CVE-2018-6947—

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoM

23RISCO

abrir ↗

Referência✓ VexDay Proof

EZWebAlbum - Remote File Disclosure

CVE-2008-3293—webappsphp

Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the

23RISCO

abrir ↗

Referência

CVE-2010-1659

CVE-2010-1659—

Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows rem

43RISCO

abrir ↗

Referência

CVE-2011-4062

CVE-2011-4062—

Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or

23RISCO

abrir ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

Lms 1.8.9 - Vala Remote File Inclusion

CVE-2007-1643—webappsphp

Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote at

28RISCO

abrir ↗

Referência✓ VexDay Proof

Focus/SIS 1.0/2.2 - Remote File Inclusion

CVE-2007-4806—webappsphp

PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote a

23RISCO

abrir ↗

Referência

CVE-2014-9224

CVE-2014-9224—

Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management serve

23RISCO

abrir ↗

Referência

CVE-2010-1352

CVE-2010-1352—

Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2010-0288

CVE-2010-0288—

A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 5.2.4 ionCube - 'ioncube_read_file' Safe Mode / disable_functions Bypass

CVE-2007-5447—localwindows

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_funct

23RISCO

abrir ↗

Referência

CVE-2020-23839

CVE-2020-23839—

A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpa

28RISCO

abrir ↗

Referência✓ VexDay Proof

Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution

CVE-2008-3486—webappsphp

Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gall

23RISCO

abrir ↗

Referência

CVE-2020-35754

CVE-2020-35754—

OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequentl

28RISCO

abrir ↗

Referência

CVE-2012-4768

CVE-2012-4768—

Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attac

43RISCO

abrir ↗

Referência

CVE-2016-6754

CVE-2016-6754—

A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-

23RISCO

abrir ↗

Referência

CVE-2011-4571

CVE-2011-4571—

SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection

CVE-2008-3487—webappsphp

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-1739

CVE-2010-1739—

SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component for Joomla! allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-1744

CVE-2010-1744—

SQL injection vulnerability in product.html in B2B Gold Script allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2024-12344

CVE-2024-12344MEDIUM

TP-Link VN020 F3v(T) FTP USER Command memory corruption

33RISCO

abrir ↗

Referência

CVE-2026-12697

CVE-2026-12697MEDIUM

wpForo Forum < 3.1.2 - Subscriber+ Cross-User AI Chat Message Deletion via IDOR

33RISCO

abrir ↗

Referência

CVE-2025-28137

CVE-2025-28137CRITICAL

The TOTOLINK A810R V4.1.2cu.5182_B20201026 were found to contain a pre-auth remote command execution vulnerability in th

53RISCO

abrir ↗

Referência

CVE-2010-1315

CVE-2010-1315—

Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (com_weberpcustomer) component 1.2.1 and 1

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.