Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-18050

CVE-2026-18050HIGH

Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads

41RISCO

abrir ↗

Referência✓ VexDay Proof

jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-2966—webappsphp

Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

CMS little 0.0.1 - 'template' Local File Inclusion

CVE-2008-3036—webappsphp

Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion

CVE-2008-4702—webappsphp

Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thyme Calendar 1.3 - SQL Injection

CVE-2007-2621—webappsphp

SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência✓ VexDay Proof

Data Dynamics ActiveReport - ActiveX 'actrpt2.dll 2.5' Insecure Method

CVE-2007-3982—remotewindows

Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2

23RISCO

abrir ↗

Referência✓ VexDay Proof

doop CMS 1.3.7 - Local File Inclusion

CVE-2007-5465—webappsphp

Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.8.2 - 'template_path' Remote File Inclusion

CVE-2008-0502—webappsphp

PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlier

23RISCO

abrir ↗

Referência

CVE-2010-3603

CVE-2010-3603—

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.

23RISCO

abrir ↗

Referência

CVE-2010-3603

CVE-2010-3603—

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.

23RISCO

abrir ↗

Referência

CVE-2026-13500

CVE-2026-13500MEDIUM

antlr ANTLR4 Grammar Action Block OutputFile.java code injection

33RISCO

abrir ↗

Referência

CVE-2018-14497

CVE-2018-14497—

Tenda D152 ADSL routers allow XSS via a crafted SSID.

23RISCO

abrir ↗

Referência

CVE-2018-0901

CVE-2018-0901—

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve

23RISCO

abrir ↗

Referência

CVE-2010-1725

CVE-2010-1725—

SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-1725

CVE-2010-1725—

SQL injection vulnerability in offers_buy.php in Alibaba Clone Platinum allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-16603

CVE-2026-16603HIGH

Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Content Disclosure via Core REST API

41RISCO

abrir ↗

Referência

CVE-2010-1726

CVE-2010-1726—

SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2009-4825

CVE-2009-4825—

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote

23RISCO

abrir ↗

Referência

CVE-2009-4820

CVE-2009-4820—

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

microssys CMS 1.5 - Remote File Inclusion

CVE-2008-2396—webappsphp

PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_glob

23RISCO

abrir ↗

Referência✓ VexDay Proof

deeemm CMS (dmcms) 0.7.4 - Multiple Vulnerabilities

CVE-2008-3721—webappsphp

PHP remote file inclusion vulnerability in user_language.php in DeeEmm CMS (DMCMS) 0.7.4 allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

wotw 5.0 - Local/Remote File Inclusion

CVE-2008-6223—webappsphp

PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote att

23RISCO

abrir ↗

Referência

CVE-2009-4056

CVE-2009-4056—

Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arb

23RISCO

abrir ↗

Referência

CVE-2009-4471

CVE-2009-4471—

Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Destar 0.2.2-5 - Arbitrary Add New User

CVE-2008-6538—webappsphp

DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser.

23RISCO

abrir ↗

Referência

CVE-2010-1726

CVE-2010-1726—

SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

GRBoard 1.8 - Multiple Remote File Inclusions

CVE-2009-0444—webappsphp

Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when register_globals is enabled and magic_quotes_gpc

23RISCO

abrir ↗

Referência✓ VexDay Proof

acute control panel 1.0.0 - SQL Injection / Remote File Inclusion

CVE-2009-1248—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2018-18419

CVE-2018-18419—

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen

23RISCO

abrir ↗

Referência

CVE-2017-10129

CVE-2017-10129—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.