Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2009-3823

CVE-2009-3823—

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote a

23RISCO

abrir ↗

Referência

CVE-2009-4723

CVE-2009-4723—

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitr

23RISCO

abrir ↗

Referência

CVE-2012-5331

CVE-2012-5331—

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. (do

23RISCO

abrir ↗

Referência

CVE-2009-3507

CVE-2009-3507—

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

GuestCal 2.1 - 'index.php?lang' Local File Inclusion

CVE-2009-1319—webappsphp

Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2026-11531

CVE-2026-11531MEDIUM

imvks786 student_management_system Administrator Login Endpoint admin_login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2009-4426

CVE-2009-4426—

Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-4426

CVE-2009-4426—

Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2018-11404

CVE-2018-11404—

DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.

23RISCO

abrir ↗

Referência

CVE-2016-5237

CVE-2016-5237—

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to m

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência

CVE-2014-9528

CVE-2014-9528—

SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle

23RISCO

abrir ↗

Referência✓ VexDay Proof

beLive 0.2.3 - 'arch.php?arch' Local File Inclusion

CVE-2009-1649—webappsphp

Directory traversal vulnerability in arch.php in beLive 0.2.3 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2026-5311

CVE-2026-5311MEDIUM

D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

33RISCO

abrir ↗

Referência

CVE-2026-5310

CVE-2026-5310LOW

Enter Software Iperius Backup IperiusAccounts.ini hard-coded key

28RISCO

abrir ↗

Referência

CVE-2010-1924

CVE-2010-1924—

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-5003

CVE-2010-5003—

SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2023-5212

CVE-2023-5212CRITICAL

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

48RISCO

abrir ↗

Referência

CVE-2016-5309

CVE-2016-5309—

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);

23RISCO

abrir ↗

Referência

CVE-2009-2792

CVE-2009-2792—

Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS (RSCMS) 0.3a allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2009-3825

CVE-2009-3825—

Multiple directory traversal vulnerabilities in GenCMS 2006 allow remote attackers to include and execute arbitrary loca

23RISCO

abrir ↗

Referência

CVE-2012-5685

CVE-2012-5685—

SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via t

23RISCO

abrir ↗

Referência

CVE-2010-1936

CVE-2010-1936—

Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled

23RISCO

abrir ↗

Referência

CVE-2009-3596

CVE-2009-3596—

JoxTechnology Ajox Poll does not properly restrict access to admin/managepoll.php, which allows remote attackers to bypa

23RISCO

abrir ↗

Referência

CVE-2010-1936

CVE-2010-1936—

Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled

23RISCO

abrir ↗

Referência

CVE-2018-15845

CVE-2018-15845—

There is a CSRF vulnerability that can add an administrator account in Gleez CMS 1.2.0 via admin/users/add.

23RISCO

abrir ↗

Referência

CVE-2021-42751

CVE-2021-42751—

A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrat

23RISCO

abrir ↗

Referência

CVE-2009-2330

CVE-2009-2330—

Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2015-4460

CVE-2015-4460—

Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box befor

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.