Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-11620

CVE-2026-11620MEDIUM

TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation

33RISCO

abrir ↗

Referência

CVE-2026-11618

CVE-2026-11618MEDIUM

DTStack Taier Source Connection Test Endpoint LoginInterceptor.java preHandle improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-11556

CVE-2026-11556HIGH

Tenda F451 Web Management WriteFacMac formWriteFacMac os command injection

41RISCO

abrir ↗

Referência✓ VexDay Proof

JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection

CVE-2006-6149—webappsphp

SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2026-19718

CVE-2026-19718HIGH

BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery

41RISCO

abrir ↗

Referência✓ VexDay Proof

Ay System CMS 2.6 - 'main.php' Remote File Inclusion

CVE-2006-4440—webappsphp

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2026-19226

CVE-2026-19226MEDIUM

Royal Elementor Addons < 1.7.1066 - Contributor+ Stored XSS via Image Accordion Widget Effect Settings

33RISCO

abrir ↗

Referência

CVE-2026-19220

CVE-2026-19220LOW

Forminator Forms < 1.57.1 - Unauthenticated Multisite Site Creation and Privilege Escalation

28RISCO

abrir ↗

Referência✓ VexDay Proof

PHPECard 2.1.4 - 'functions.php' Remote File Inclusion

CVE-2006-4456—webappsphp

PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2006-6576

CVE-2006-6576—

Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (

50RISCO

abrir ↗

Referência✓ VexDay Proof

Downstat 1.8 - 'art' Remote File Inclusion

CVE-2006-4827—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2015-4593

CVE-2015-4593—

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserServ

23RISCO

abrir ↗

Referência

CVE-2015-4624

CVE-2015-4624—

Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.

43RISCO

abrir ↗

Referência

CVE-2015-4630

CVE-2015-4630—

Multiple cross-site request forgery (CSRF) vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x

23RISCO

abrir ↗

Referência

CVE-2015-4877

CVE-2015-4877—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.

23RISCO

abrir ↗

Referência

CVE-2015-5603

CVE-2015-5603—

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java

50RISCO

abrir ↗

Referência

CVE-2015-5603

CVE-2015-5603—

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java

50RISCO

abrir ↗

Referência

CVE-2015-5603

CVE-2015-5603—

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java

50RISCO

abrir ↗

Referência

CVE-2015-5133

CVE-2015-5133—

Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR

35RISCO

abrir ↗

Referência

CVE-2015-5287

CVE-2015-5287HIGHsob ataque

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm

86RISCO

abrir ↗

Referência✓ VexDay Proof

TeamCal Pro 2.8.001 - 'app_root' Remote File Inclusion

CVE-2006-4845—webappsphp

PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

MobilePublisherPHP 1.5 RC2 - Remote File Inclusion

CVE-2006-4849—webappsphp

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

BolinOS 4.5.5 - 'gBRootPath' Remote File Inclusion

CVE-2006-4850—webappsphp

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Q-Shop 3.5 - 'browse.asp' SQL Injection

CVE-2006-4852—webappsasp

SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2015-5465

CVE-2015-5465—

Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_serverstat 0.4.4 - Remote File Inclusion

CVE-2006-4858—webappsphp

PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier c

23RISCO

abrir ↗

Referência

CVE-2015-5520

CVE-2015-5520—

Cross-site scripting (XSS) vulnerability in the Users module in Orchard 1.7.3 through 1.8.2 and 1.9.x before 1.9.1 allow

23RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2015-6305

CVE-2015-6305—

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConne

23RISCO

abrir ↗

Referência

CVE-2026-9346

CVE-2026-9346HIGH

Edimax EW-7438RPn webs formWirelessTbl buffer overflow

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.