Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.941exploits catalogados

32.192CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.297VulnCheck XDB 8.176Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2010-1267

CVE-2010-1267—

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência

CVE-2010-1267

CVE-2010-1267—

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitr

23RISCO

abrir ↗

Referência

CVE-2009-4698

CVE-2009-4698—

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-4698

CVE-2009-4698—

Multiple SQL injection vulnerabilities in the Qas (aka Quas) module for XOOPS Celepar allow remote attackers to execute

23RISCO

abrir ↗

Referência

FlushCMS 1.0.0-pre2 - 'class.rich.php' Remote File Inclusion

CVE-2006-3754—

PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier a

23RISCO

abrir ↗

Referência

IDM-OS 1.0 - 'Filename' File Disclosure

CVE-2008-0431—

Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to re

23RISCO

abrir ↗

Referência

Wysi Wiki Wyg 1.0 - Local File Inclusion / Cross-Site Scripting / PHPInfo

CVE-2008-3205—

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrar

23RISCO

abrir ↗

Referência

aePartner 0.8.3 - 'dir[data]' Remote File Inclusion

CVE-2006-2996—

PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote a

23RISCO

abrir ↗

Referência

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6330—

index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in t

23RISCO

abrir ↗

Referência

S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete

CVE-2009-0864—

S-Cms 1.1 Stable allows remote attackers to bypass authentication and obtain administrative access via an OK value for t

23RISCO

abrir ↗

Referência

CVE-2009-4700

CVE-2009-4700—

Directory traversal vulnerability in index.php in SkaDate Dating allows remote attackers to read arbitrary files via a .

23RISCO

abrir ↗

Referência

CVE-2009-0640

CVE-2009-0640—

Directory traversal vulnerability in the administrative web server in Swann DVR4-SecuraNet allows remote attackers to re

23RISCO

abrir ↗

Referência

asp-project 1.0 - Insecure Cookie Method

CVE-2009-0280—

Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting th

23RISCO

abrir ↗

Referência

JChit counter 1.0.0 - 'imgsrv.php?ac' Remote File Disclosure

CVE-2007-2184—

Directory traversal vulnerability in imgsrv.php in jchit counter 1.0.0 allows remote attackers to read arbitrary files v

23RISCO

abrir ↗

Referência

CVE-2025-34184

CVE-2025-34184CRITICAL

Ilevia EVE X1 Server 4.7.18.0.eden Neuro-Core Unauthenticated Code Injection

48RISCO

abrir ↗

Referência

CVE-2025-34184

CVE-2025-34184CRITICAL

Ilevia EVE X1 Server 4.7.18.0.eden Neuro-Core Unauthenticated Code Injection

48RISCO

abrir ↗

Referência

CVE-2010-4839

CVE-2010-4839—

SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2018-5720

CVE-2018-5720—

An issue was discovered on DODOCOOL DC38 3-in-1 N300 Mini Wireless Range Extend RTN2-AW.GD.R3465.1.20161103 devices. A C

23RISCO

abrir ↗

Referência

CVE-2009-4808

CVE-2009-4808—

admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrativ

23RISCO

abrir ↗

Referência

CVE-2012-5243

CVE-2012-5243—

functions/suggest.php in Banana Dance B.2.6 and earlier allows remote attackers to read arbitrary database information v

23RISCO

abrir ↗

Referência

CVE-2018-0751

CVE-2018-0751—

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709

23RISCO

abrir ↗

Referência

Admidio 1.4.8 - 'getfile.php' Remote File Disclosure

CVE-2008-5209—

Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arbi

23RISCO

abrir ↗

Referência

CVE-2018-6582

CVE-2018-6582—

SQL Injection exists in the Zh GoogleMap 8.4.0.0 component for Joomla! via the id parameter in a getPlacemarkDetails, ge

23RISCO

abrir ↗

Referência

vidshare pro - SQL Injection / Cross-Site Scripting

CVE-2009-1735—

Cross-site scripting (XSS) vulnerability in search.php in VidSharePro allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

Quick 'n Easy Mail Server 3.3 (Demo) - Remote Denial of Service (PoC)

CVE-2009-1602—

Pablo Software Solutions Quick 'n Easy Mail Server 3.3 allows remote attackers to cause a denial of service (daemon outa

23RISCO

abrir ↗

Referência

Extract Website - 'Filename' File Disclosure

CVE-2008-6334—

Directory traversal vulnerability in download.php in eMetrix Extract Website allows remote attackers to read arbitrary f

23RISCO

abrir ↗

Referência

Online Keyword Research Tool - 'download.php' File Disclosure

CVE-2008-6335—

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to rea

23RISCO

abrir ↗

Referência

MiniWeb HTTP Server 0.8.x - Remote Denial of Service

CVE-2007-3159—

http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negat

23RISCO

abrir ↗

Referência

ibase 2.03 - Remote File Disclosure

CVE-2008-6288—

Directory traversal vulnerability in download.php in Interface Medien ibase 2.03 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion

CVE-2006-4369—

Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.