Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Mini File Host 1.x - Arbitrary '.PHP' File Upload

CVE-2008-6785—webappsphp

Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by upload

23RISCO

abrir ↗

Referência✓ VexDay Proof

Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)

CVE-2008-6936—remotewindows

Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, over

23RISCO

abrir ↗

Referência

CVE-2019-15253

CVE-2019-15253MEDIUM

Cisco Digital Network Architecture Center Stored Cross-Site Scripting Vulnerability

33RISCO

abrir ↗

Referência

CVE-2017-0287

CVE-2017-0287—

Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

23RISCO

abrir ↗

Referência

CVE-2011-4807

CVE-2011-4807—

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência

CVE-2006-5191

CVE-2006-5191—

PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for

23RISCO

abrir ↗

Referência

CVE-2019-8390

CVE-2019-8390—

qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

38RISCO

abrir ↗

Referência

CVE-2019-13236

CVE-2019-13236—

In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the man

23RISCO

abrir ↗

Referência

CVE-2019-8390

CVE-2019-8390—

qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] parameter.

38RISCO

abrir ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

k_fileManager 1.2 - 'dwl_include_path' Remote File Inclusion

CVE-2006-3987—webappsphp

Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remot

23RISCO

abrir ↗

Referência

CVE-2020-25820

CVE-2020-25820—

BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploade

28RISCO

abrir ↗

Referência

CVE-2009-4221

CVE-2009-4221—

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2018-14592

CVE-2018-14592—

The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 fo

23RISCO

abrir ↗

Referência

CVE-2009-4221

CVE-2009-4221—

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

DBGuestbook 1.1 - 'dbs_base_path' Remote File Inclusion

CVE-2007-1165—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DBGuestbook 1.1 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3425—webappsphp

Directory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to include arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1651—webappsphp

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

gapicms 9.0.2 - 'dirDepth' Remote File Inclusion

CVE-2008-3183—webappsphp

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

HIOX Random Ad 1.3 - Remote File Inclusion

CVE-2008-3401—webappsphp

PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to execu

23RISCO

abrir ↗

Referência

CVE-2012-5913

CVE-2012-5913—

Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allo

38RISCO

abrir ↗

Referência

CVE-2023-23956

CVE-2023-23956MEDIUM

A user can supply malicious HTML and JavaScript code that will be executed in the client browser

33RISCO

abrir ↗

Referência

CVE-2009-2600

CVE-2009-2600—

Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea

23RISCO

abrir ↗

Referência

Joomla JS Jobs plugin 1.4.2 - SQL injection

CVE-2025-49484HIGHwebappsphp

Extension - joomsky.com - SQL injection in JS jobs component version 1.1.5 - 1.4.1 for Joomla

41RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência

CVE-2015-1862

CVE-2015-1862—

The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot

23RISCO

abrir ↗

Referência

CVE-2016-6664

CVE-2016-6664—

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo

23RISCO

abrir ↗

Referência

CVE-2016-6664

CVE-2016-6664—

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo

23RISCO

abrir ↗

Referência

CVE-2020-7991

CVE-2020-7991—

Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.