Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2021-22911

CVE-2021-22911—

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

Referência

CVE-2010-3204

CVE-2010-3204—

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Public 1.0 - Arbitrary File Upload (PoC)

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência

CVE-2010-3204

CVE-2010-3204—

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

CVE-2008-4516—webappsphp

SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-3206

CVE-2010-3206—

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência

CVE-2026-57951

CVE-2026-57951HIGH

Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table

41RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod raidtracker_panel - 'INFO_RAID_ID' SQL Injection

CVE-2008-4521—webappsphp

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module

23RISCO

abrir ↗

Referência✓ VexDay Proof

JMweb - 'src' Local File Inclusion

CVE-2008-4522—webappsphp

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2017-17098

CVE-2017-17098—

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência

CVE-2010-3267

CVE-2010-3267—

Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2016-2184

CVE-2016-2184—

The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.

23RISCO

abrir ↗

Referência

CVE-2010-4970

CVE-2010-4970—

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2010-3275

CVE-2010-3275—

libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a

60RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component actualite 1.0 - 'id' SQL Injection

CVE-2008-4617—webappsphp

SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2026-19406

CVE-2026-19406LOW

Easy Appointments < 4.0.1 - Contributor+ Sensitive Information Disclosure via REST Appointments Listing

28RISCO

abrir ↗

Referência

CVE-2026-19056

CVE-2026-19056HIGH

ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter

41RISCO

abrir ↗

Referência✓ VexDay Proof

Meeting Room Booking System (MRBS) < 1.4 - SQL Injection

CVE-2008-4620—webappsphp

SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2026-6552

CVE-2026-6552—

3RISCO

abrir ↗

Referência

CVE-2026-7713

CVE-2026-7713MEDIUM

crocodilestick Calibre-Web-Automated Kobo auth-token Route kobo_auth.py generate_auth_token improper authorization

33RISCO

abrir ↗

Referência✓ VexDay Proof

NewsLetter 3.5 - 'NL_PATH' Remote File Inclusion

CVE-2006-3986—webappsphp

PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ds-syndicate - 'feed_id' SQL Injection

CVE-2008-4623—webappsphp

SQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

newsReporter 1.1 - 'index.php' Remote File Inclusion

CVE-2006-3988—webappsphp

PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module makale 0.26 - SQL Injection

CVE-2008-4653—webappsphp

SQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module for XOOPS, allows remote

23RISCO

abrir ↗

Referência

CVE-2016-2494

CVE-2016-2494—

Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before

23RISCO

abrir ↗

Referência

CVE-2026-12197

CVE-2026-12197HIGH

Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection

41RISCO

abrir ↗

Referência

CVE-2016-2494

CVE-2016-2494—

Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before

23RISCO

abrir ↗

Referência

CVE-2026-25558

CVE-2026-25558MEDIUM

QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager

13RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.