Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2018-11508

CVE-2018-11508—

The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensitiv

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Ark 1.0 - '/src/ark_inc.php' Remote File Inclusion

CVE-2006-6086—webappsphp

PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2010-4792

CVE-2010-4792—

Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-5042

CVE-2010-5042—

Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remo

23RISCO

abrir ↗

Referência✓ VexDay Proof

eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities

CVE-2006-6872—webappsphp

Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2018-1002001

CVE-2018-1002001—

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

abrir ↗

Referência

CVE-2018-12234

CVE-2018-12234—

A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

CVE-2007-1636—webappsphp

Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files

23RISCO

abrir ↗

Referência

CVE-2009-4154

CVE-2009-4154—

Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Azimyt CMS 0.22 - 'lang' Local File Inclusion

CVE-2008-2820—webappsphp

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sepcity Classified - 'ID' SQL Injection

CVE-2008-6157—webappsasp

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, which allows context-dependent at

23RISCO

abrir ↗

Referência

CVE-2020-27422

CVE-2020-27422—

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an a

23RISCO

abrir ↗

Referência

CVE-2014-2533

CVE-2014-2533—

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arb

38RISCO

abrir ↗

Referência

CVE-2014-2533

CVE-2014-2533—

/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arb

38RISCO

abrir ↗

Referência

CVE-2009-4886

CVE-2009-4886—

Multiple directory traversal vulnerabilities in phpCommunity 2 2.1.8 allow remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência

CVE-2009-4456

CVE-2009-4456—

SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Quick.Cart 2.2 - Local/Remote File Inclusion / Remote Code Execution

CVE-2007-3138—webappsphp

Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to in

23RISCO

abrir ↗

Referência

CVE-2012-1935

CVE-2012-1935—

Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote att

23RISCO

abrir ↗

Referência

CVE-2017-11355

CVE-2017-11355—

Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to injec

23RISCO

abrir ↗

Referência✓ VexDay Proof

bubbling library 1.32 - 'uri' Remote File Disclosure

CVE-2008-0521—webappsphp

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files via

23RISCO

abrir ↗

Referência

CVE-2019-13235

CVE-2019-13235—

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

23RISCO

abrir ↗

Referência

CVE-2009-4461

CVE-2009-4461—

Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2019-13234

CVE-2019-13234—

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kasseler CMS 1.3.0 - Local File Inclusion / Cross-Site Scripting

CVE-2008-3087—webappsphp

Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot do

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPmyGallery Gold 1.51 - 'index.php' Directory Traversal

CVE-2008-5598—webappsphp

Directory traversal vulnerability in index.php in PHPmyGallery 1.51 gold allows remote attackers to list arbitrary direc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Classified Listings - Insecure Cookie Handling

CVE-2008-6231—webappsphp

Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting th

23RISCO

abrir ↗

Referência✓ VexDay Proof

FREEsimplePHPGuestbook - 'Guestbook.php' Remote Code Execution

CVE-2008-6934—webappsphp

Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded

23RISCO

abrir ↗

Referência

CVE-2026-12511

CVE-2026-12511HIGH

AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal

41RISCO

abrir ↗

Referência

CVE-2026-11567

CVE-2026-11567MEDIUM

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass

33RISCO

abrir ↗

Referência

CVE-2013-6674

CVE-2013-6674—

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.1

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.