Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência✓ VexDay Proof

PHPLibrary 1.5.3 - 'grid3.lib.php' Remote File Inclusion

CVE-2006-5471—webappsphp

PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softerra PHP Developer Library 1.5.3 - Remote File Inclusion

CVE-2006-5472—webappsphp

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure

CVE-2008-6138—webappsphp

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure

CVE-2008-6139—webappsphp

Directory traversal vulnerability in faqsupport/wce.download.php in WebBiscuits Modules Controller 1.1 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Live Ticker 1.0 - Blind SQL Injection

CVE-2008-6148—webappsphp

SQL injection vulnerability in the Live Ticker (com_liveticker) module 1.0 for Joomla! allows remote attackers to execut

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6150—webappsasp

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

HispaH textlinksads - 'index.php' SQL Injection

CVE-2008-6154—webappsphp

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

AdMan 1.1.20070907 - 'campaignId' SQL Injection

CVE-2008-6156—webappsphp

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bux.to Clone Script - Insecure Cookie Handling

CVE-2008-6162—webappsphp

Bux.to Clone script allows remote attackers to bypass authentication and gain administrative access by setting the logge

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 - Arbitrary Database Backup/Download

CVE-2008-6199—webappsphp

2532designs 2532|Gigs 1.2.2 and earlier allows remote attackers to trigger a backup and obtain sensitive information via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Cobalt 0.1 - Multiple SQL Injections

CVE-2008-6202—webappsasp

SQL injection vulnerability in CoBaLT 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter

23RISCO

abrir ↗

Referência

CVE-2022-50955

CVE-2022-50955MEDIUM

WordPress Plugin Curtain 1.0.2 Cross-site Request Forgery

33RISCO

abrir ↗

Referência

CVE-2022-50954

CVE-2022-50954MEDIUM

WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion

33RISCO

abrir ↗

Referência

CVE-2022-50949

CVE-2022-50949MEDIUM

WordPress Plugin Videos sync PDF 1.7.4 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2022-50948

CVE-2022-50948MEDIUM

Motopress Hotel Booking Lite 4.2.4 Stored Cross-Site Scripting

33RISCO

abrir ↗

Referência

CVE-2022-50947

CVE-2022-50947MEDIUM

WordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2022-50946

CVE-2022-50946MEDIUM

WordPress Plugin Netroics Blog Posts Grid 1.0 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2022-50945

CVE-2022-50945MEDIUM

WordPress 3dady Real-Time Web Stats 1.0 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2022-50943

CVE-2022-50943MEDIUM

Moodle LMS 4.0 Cross-Site Scripting via course search.php

33RISCO

abrir ↗

Referência

CVE-2026-8244

CVE-2026-8244MEDIUM

Industrial Application Software IAS Canias ERP Login RMI improper authentication

33RISCO

abrir ↗

Referência✓ VexDay Proof

MDweb 1.3 - 'chemin_appli' Remote File Inclusion

CVE-2006-5587—webappsphp

Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

ArticleBeach Script 2.0 - 'index.php' Remote File Inclusion

CVE-2006-5590—webappsphp

PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

GestArt Beta 1 - 'aide.php?aide' Remote File Inclusion

CVE-2006-5612—webappsphp

PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled,

23RISCO

abrir ↗

Referência✓ VexDay Proof

mp3SDS 3.0 - '/Core/core.inc.php' Remote File Inclusion

CVE-2006-5613—webappsphp

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabl

23RISCO

abrir ↗

Referência✓ VexDay Proof

ask_rave 0.9 PR - 'end.php?footfile' Remote File Inclusion

CVE-2006-5621—webappsphp

PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Coppermine Photo Gallery 1.4.9 - SQL Injection

CVE-2006-5622—webappsphp

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2025-15609

CVE-2025-15609HIGH

Fortis For WooCommerce < 1.3.1 - Sensitive API Key Disclosure

41RISCO

abrir ↗

Referência

CVE-2026-41949

CVE-2026-41949HIGH

Dify < 1.14.2 Authorization Bypass via File Preview Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-41948

CVE-2026-41948CRITICAL

Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access

48RISCO

abrir ↗

Referência

CVE-2026-8208

CVE-2026-8208HIGH

Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the re

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.