Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

83.853exploits catalogados

39.383CVEs com exploração pública

24.695testados em laboratório

Todos Referência 25.447Exploit-DB 24.485GitHub PoC 16.269VulnCheck XDB 9.651Nuclei 4.478Metasploit 3.523✓ só verificadosrecentes populares risco

25.447 exploits

Referência✓ VexDay Proof

LiteNews 0.1 - Insecure Cookie Handling

CVE-2008-3508—webappsphp

LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component ProDesk 1.0/1.2 - Local File Inclusion

CVE-2008-6222—webappsphp

Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows

43RISCO

abrir ↗

Referência

CVE-2010-0457

CVE-2010-0457—

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

VS-News-System 1.2.1 - 'newsordner' Remote File Inclusion

CVE-2007-1017—webappsphp

PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress Plugin WP-Forum 1.7.4 - SQL Injection

CVE-2008-0388—webappsphp

SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

wotw 5.0 - Local/Remote File Inclusion

CVE-2008-6223—webappsphp

PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior (WOTW) 5.0 and earlier allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mole Group Airline Ticket Script - SQL Injection

CVE-2008-6225—webappsphp

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2023-38831

CVE-2023-38831HIGHsob ataqueransomware

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a

100RISCO

abrir ↗

Referência✓ VexDay Proof

TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities

CVE-2007-1080—doswindows

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1

23RISCO

abrir ↗

Referência

CVE-2010-4736

CVE-2010-4736—

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4736

CVE-2010-4736—

SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Webring - 'cat' SQL Injection

CVE-2008-6246—webappsphp

SQL injection vulnerability in category.php in Scripts For Sites (SFS) EZ Webring allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2026-7740

CVE-2026-7740MEDIUM

justdan96 tsMuxer vvc.cpp setFPS denial of service

33RISCO

abrir ↗

Referência

CVE-2026-7739

CVE-2026-7739MEDIUM

justdan96 tsMuxer hevc.cpp setFPS denial of service

33RISCO

abrir ↗

Referência

CVE-2026-7738

CVE-2026-7738MEDIUM

puchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal

33RISCO

abrir ↗

Referência

CVE-2010-0630

CVE-2010-0630—

SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-0630

CVE-2010-0630—

SQL injection vulnerability in viewjokes.php in Evernew Free Joke Script 1.2 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-4770

CVE-2010-4770—

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2023-22809

CVE-2023-22809HIGH

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

abrir ↗

Referência

CVE-2010-0678

CVE-2010-0678—

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlie

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

CVE-2008-6253—webappsphp

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when register_globals is enabled, allow

23RISCO

abrir ↗

Referência

CVE-2025-32433

CVE-2025-32433CRITICALsob ataque

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

Referência✓ VexDay Proof

Acc Autos 4.0 - Insecure Cookie Handling

CVE-2008-6292—webappsphp

Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) usernam

23RISCO

abrir ↗

Referência

CVE-2026-19897

CVE-2026-19897MEDIUM

mangroup dtale Login Endpoint auth.py login excessive authentication

33RISCO

abrir ↗

Referência

CVE-2026-7732

CVE-2026-7732MEDIUM

code-projects BloodBank Managing System request_blood.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2023-0777

CVE-2023-0777HIGH

Authentication Bypass by Primary Weakness in modoboa/modoboa

61RISCO

abrir ↗

Referência✓ VexDay Proof

Acc Statistics 1.1 - Insecure Cookie Handling

CVE-2008-6294—webappsphp

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by

23RISCO

abrir ↗

Referência

CVE-2026-19896

CVE-2026-19896MEDIUM

mangroup dtale Flask Session Cookie app.py build_secret_key random values

33RISCO

abrir ↗

Referência

CVE-2026-16007

CVE-2026-16007HIGH

Authenticated SQL Injection in AppFlowy

41RISCO

abrir ↗

Referência✓ VexDay Proof

Maran PHP Shop - 'admin.php' Insecure Cookie Handling

CVE-2008-6296—webappsphp

admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting t

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.