Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência✓ VexDay Proof

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

CVE-2008-2215—webappsphp

Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2010-2677

CVE-2010-2677—

PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência

CVE-2010-2677

CVE-2010-2677—

PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência✓ VexDay Proof

V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion

CVE-2006-2666—webappsphp

PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeLyrics 1.0 - Remote File Disclosure

CVE-2008-5861—webappsphp

Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via di

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

CVE-2008-5979—webappsphp

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method

CVE-2008-6496—doswindows

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT

23RISCO

abrir ↗

Referência✓ VexDay Proof

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities

CVE-2009-2080—webappsphp

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obta

23RISCO

abrir ↗

Referência

CVE-2010-2438

CVE-2010-2438—

SQL injection vulnerability in G.CMS generator allows remote attackers to execute arbitrary SQL commands via the lang pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

Basic-CMS - SQL Injection

CVE-2008-2789—webappsphp

SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands vi

43RISCO

abrir ↗

Referência✓ VexDay Proof

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

CVE-2007-6488—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2016-3716

CVE-2016-3716—

The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via

28RISCO

abrir ↗

Referência

CVE-2015-2843

CVE-2015-2843—

Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute

50RISCO

abrir ↗

Referência✓ VexDay Proof

cwmExplorer 1.0 - 'show_file' Source Code Disclosure

CVE-2006-6757—webappsasp

Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and so

23RISCO

abrir ↗

Referência✓ VexDay Proof

Comparison Engine Power 1.0 - Blind SQL Injection

CVE-2008-2791—webappsphp

SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote

23RISCO

abrir ↗

Referência

CVE-2026-19964

CVE-2026-19964MEDIUM

Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

eroCMS 1.4 - 'site' SQL Injection

CVE-2008-2792—webappsphp

SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2022-4944

CVE-2022-4944MEDIUM

kalcaddle KodExplorer cross-site request forgery

33RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.1A1 - 'mini.php' Local File Inclusion

CVE-2008-4718—webappsphp

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

X7 Chat 2.0.1A1 - Local File Inclusion

CVE-2008-4718—webappsphp

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pakupaku CMS 0.4 - Arbitrary File Upload / Local File Inclusion

CVE-2007-4641—webappsphp

Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência

CVE-2010-2456

CVE-2010-2456—

Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read a

23RISCO

abrir ↗

Referência

CVE-2026-26341

CVE-2026-26341CRITICAL

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

63RISCO

abrir ↗

Referência

CVE-2024-38887

CVE-2024-38887CRITICAL

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows

48RISCO

abrir ↗

Referência

CVE-2026-19955

CVE-2026-19955MEDIUM

TrailDB TOC Validation tdb.c tdb_open out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2013-7349

CVE-2013-7349—

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2013-7349

CVE-2013-7349—

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2013-7349

CVE-2013-7349—

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.