Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.697 exploits

Referência✓ VexDay Proof

Vastal I-Tech MMORPG Zone - 'game_id' SQL Injection

CVE-2008-4460—webappsphp

SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL co

23RISCO

abrir ↗

Referência

CVE-2026-50656

CVE-2026-50656HIGH

Microsoft Defender Elevation of Privilege Vulnerability

46RISCO

abrir ↗

Referência

CVE-2016-1915

CVE-2016-1915—

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4

23RISCO

abrir ↗

Referência

CVE-2016-1960

CVE-2016-1960—

Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox

35RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component 'com_colophon' 1.2 - Remote File Inclusion

CVE-2006-3969—webappsphp

PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and

23RISCO

abrir ↗

Referência

CVE-2026-7785

CVE-2026-7785MEDIUM

A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7784

CVE-2026-7784MEDIUM

RTGS2017 NagaAgent Skills Endpoint extensions.py path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7783

CVE-2026-7783MEDIUM

CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7782

CVE-2026-7782MEDIUM

CodeCanyon Perfex CRM Tenant Clients.php project authorization

33RISCO

abrir ↗

Referência

CVE-2026-7781

CVE-2026-7781MEDIUM

Open5GS amf-3gpp-access Endpoint nudm-handler.c udm_nudm_uecm_handle_amf_registration_update denial of service

33RISCO

abrir ↗

Referência

CVE-2010-3203

CVE-2010-3203—

Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read

38RISCO

abrir ↗

Referência

CVE-2017-16928

CVE-2017-16928—

The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently g

23RISCO

abrir ↗

Referência

CVE-2023-54357

CVE-2023-54357HIGH

Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration

41RISCO

abrir ↗

Referência

CVE-2019-25762

CVE-2019-25762HIGH

Joomla! Component JoomProject 1.1.3.2 Information Disclosure

41RISCO

abrir ↗

Referência

CVE-2017-16945

CVE-2017-16945—

The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequen

23RISCO

abrir ↗

Referência

CVE-2021-22555

CVE-2021-22555HIGHsob ataque

Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE

100RISCO

abrir ↗

Referência

CVE-2021-22911

CVE-2021-22911—

A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti

60RISCO

abrir ↗

Referência

CVE-2010-3204

CVE-2010-3204—

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

FOSS Gallery Public 1.0 - Arbitrary File Upload (PoC)

CVE-2008-4509—webappsphp

Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allows

23RISCO

abrir ↗

Referência

CVE-2010-3204

CVE-2010-3204—

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

CVE-2008-4516—webappsphp

SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-3206

CVE-2010-3206—

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência

CVE-2026-57951

CVE-2026-57951HIGH

Mythic < 3.4.0.60 - Broken Permission Filter in payload_build_step Table

41RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod raidtracker_panel - 'INFO_RAID_ID' SQL Injection

CVE-2008-4521—webappsphp

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) module

23RISCO

abrir ↗

Referência✓ VexDay Proof

JMweb - 'src' Local File Inclusion

CVE-2008-4522—webappsphp

Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2017-17098

CVE-2017-17098—

The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência

CVE-2010-3267

CVE-2010-3267—

Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2016-2184

CVE-2016-2184—

The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.

23RISCO

abrir ↗

Referência

CVE-2010-4970

CVE-2010-4970—

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.