Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2016-1915

CVE-2016-1915—

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4

23RISCO

abrir ↗

Referência

CVE-2026-10551

CVE-2026-10551MEDIUM

Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library

33RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB User Viewed Posts Tracker 1.0 - Remote File Inclusion

CVE-2006-5223—webappsphp

PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tra

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenEMR 2.8.1 - 'srcdir' Multiple Remote File Inclusions

CVE-2006-5811—webappsphp

PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

MiniBB 2.0.5 - 'Language' Local File Inclusion

CVE-2007-3272—webappsphp

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..

23RISCO

abrir ↗

Referência

CVE-2017-15957

CVE-2017-15957—

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

23RISCO

abrir ↗

Referência

CVE-2017-15957

CVE-2017-15957—

my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

23RISCO

abrir ↗

Referência✓ VexDay Proof

ScriptsFeed (SF) Real Estate Classifieds Software - Arbitrary File Upload

CVE-2008-6942—webappsphp

Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

X-Forum 0.6.2 - Remote Command Execution

CVE-2009-1512—webappsphp

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2017-17590

CVE-2017-17590—

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17590

CVE-2017-17590—

FS Stackoverflow Clone 1.0 has SQL Injection via the /question keywords parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

wget 1.10.2 - Unchecked Boundary Condition Denial of Service

CVE-2006-6719—dosmultiple

The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause

23RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.3 - Multiple SQL Injections

CVE-2007-6579—webappsphp

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vl

23RISCO

abrir ↗

Referência

CVE-2012-4891

CVE-2012-4891—

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2012-4891

CVE-2012-4891—

Cross-site scripting (XSS) vulnerability in fw/index2.do in ManageEngine Firewall Analyzer 7.2 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2015-2680

CVE-2015-2680—

Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack th

23RISCO

abrir ↗

Referência

CVE-2015-2680

CVE-2015-2680—

Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack th

23RISCO

abrir ↗

Referência

CVE-2014-9605

CVE-2014-9605—

WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass aut

23RISCO

abrir ↗

Referência

CVE-2015-2508

CVE-2015-2508—

The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application,

23RISCO

abrir ↗

Referência

CVE-2015-1479

CVE-2015-1479—

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil

23RISCO

abrir ↗

Referência

CVE-2015-1479

CVE-2015-1479—

SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil

23RISCO

abrir ↗

Referência

CVE-2011-4714

CVE-2011-4714—

Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files v

23RISCO

abrir ↗

Referência

CVE-2019-0735

CVE-2019-0735—

An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to proper

23RISCO

abrir ↗

Referência

CVE-2008-3723

CVE-2008-3723—

Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to

23RISCO

abrir ↗

Referência

CVE-2009-4093

CVE-2009-4093—

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Technote 7.2 - Remote File Inclusion

CVE-2009-0441—webappsphp

PHP remote file inclusion vulnerability in skin_shop/standard/2_view_body/body_default.php in TECHNOTE 7.2, when registe

23RISCO

abrir ↗

Referência✓ VexDay Proof

ravennuke 2.3.0 - Multiple Vulnerabilities

CVE-2009-0678—webappsphp

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array paramet

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox - unclamped loop Denial of Service

CVE-2009-1827—dosmultiple

The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a

23RISCO

abrir ↗

Referência

CVE-2010-2040

CVE-2010-2040—

Cross-site scripting (XSS) vulnerability in search.php in V-EVA Shopzilla Affiliate Script PHP allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2006-5762

CVE-2006-5762—

PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.