Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2012-6039

CVE-2012-6039—

SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

blur6ex 0.3.462 - 'ID' Admin Disclosure / Blind SQL Injection

CVE-2006-3065—webappsphp

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2026-77694

CVE-2026-77694MEDIUM

Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token

33RISCO

abrir ↗

Referência✓ VexDay Proof

fipsGallery 1.5 - 'index1.asp' SQL Injection

CVE-2006-6117—webappsasp

SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2026-12811

CVE-2026-12811MEDIUM

kortix-ai suna Auth Endpoint page.tsx router.push cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

Sisfo Kampus 0.8 - Remote File Inclusion / Download

CVE-2006-6137—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sisfo Kampus 0.8 - Remote File Inclusion / Download

CVE-2006-6138—webappsphp

Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary director

23RISCO

abrir ↗

Referência✓ VexDay Proof

Spaminator 1.7 - 'page' Remote File Inclusion

CVE-2006-4158—webappsphp

PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component Peoplebook 1.0 - Remote File Inclusion

CVE-2006-4195—webappsphp

PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1

23RISCO

abrir ↗

Referência✓ VexDay Proof

Wheatblog 1.1 - 'session.php' Remote File Inclusion

CVE-2006-4198—webappsphp

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals

23RISCO

abrir ↗

Referência

CVE-2015-2208

CVE-2015-2208—

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she

50RISCO

abrir ↗

Referência✓ VexDay Proof

Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)

CVE-2006-4202—webappsasp

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBInsta MM 1.3e - 'cabsolute_path' Remote File Inclusion

CVE-2006-4209—webappsphp

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-4213—webappsphp

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows re

23RISCO

abrir ↗

Referência

CVE-2015-2216

CVE-2015-2216—

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

VistaBB 2.x - 'functions_mod_user.php' Remote File Inclusion

CVE-2006-4365—webappsphp

Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion

CVE-2006-4368—webappsphp

PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion

CVE-2006-4369—webappsphp

Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_

23RISCO

abrir ↗

Referência

CVE-2026-10694

CVE-2026-10694MEDIUM

SourceCodester Online Food Ordering System index.php include file inclusion

33RISCO

abrir ↗

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISCO

abrir ↗

Referência

CVE-2026-10226

CVE-2026-10226MEDIUM

raisulislamg4 student_management_system_by_php delete.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10225

CVE-2026-10225MEDIUM

raisulislamg4 student_management_system_by_php Login login_check.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10222

CVE-2026-10222MEDIUM

NousResearch hermes-agent config.py _sanitize_env_lines injection

33RISCO

abrir ↗

Referência

CVE-2026-10221

CVE-2026-10221MEDIUM

NousResearch hermes-agent run_agent.py _compress_context injection

33RISCO

abrir ↗

Referência

CVE-2026-16984

CVE-2026-16984MEDIUM

WP Legal Pages < 3.7.1 - Unauthenticated API Secret Disclosure

33RISCO

abrir ↗

Referência

CVE-2026-14550

CVE-2026-14550MEDIUM

WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization

33RISCO

abrir ↗

Referência

CVE-2026-10163

CVE-2026-10163HIGH

Edimax BR-6478AC POST Request formUSBAccount buffer overflow

41RISCO

abrir ↗

Referência

CVE-2018-25425

CVE-2018-25425HIGH

Yot CMS 3.3.1 SQL Injection via aid and cid Parameters

41RISCO

abrir ↗

Referência

CVE-2026-6816

CVE-2026-6816MEDIUM

TFA Basic Plugins - Access Bypass

33RISCO

abrir ↗

Referência

CVE-2026-42425

CVE-2026-42425HIGH

OpenKM 6.3.12 Unrestricted SQL Execution via DatabaseQuery

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.