Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.602exploits catalogados

34.985CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.969VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

BASE 1.2.4 - melissa Snort Frontend Remote File Inclusion

CVE-2006-2685—webappsphp

PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl

50RISCO

abrir ↗

Referência✓ VexDay Proof

CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution

CVE-2006-4721—webappsphp

Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and

23RISCO

abrir ↗

Referência

CVE-2013-2594

CVE-2013-2594—

SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at

23RISCO

abrir ↗

Referência

CVE-2013-2594

CVE-2013-2594—

SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at

23RISCO

abrir ↗

Referência

CVE-2026-5533

CVE-2026-5533MEDIUM

badlogic pi-mono SVG Artifact SvgArtifact.ts cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

GL-SH Deaf Forum 6.4.4 - Local File Inclusion

CVE-2007-3535—webappsphp

Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scribe 0.2 - PHP Remote Code Execution

CVE-2007-5823—webappsphp

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or ove

23RISCO

abrir ↗

Referência✓ VexDay Proof

Oxygen 2.0 - 'repquote' SQL Injection

CVE-2008-2816—webappsphp

SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nitro Web Gallery 1.4.3 - 'section' SQL Injection

CVE-2008-2817—webappsphp

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

SlimCMS 1.0.0 - 'redirect.php' Privilege Escalation

CVE-2008-5708—webappsphp

redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative us

23RISCO

abrir ↗

Referência✓ VexDay Proof

RPortal 1.1 - 'file_op' Remote File Inclusion

CVE-2008-6099—webappsphp

PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2017-14738

CVE-2017-14738—

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize in

23RISCO

abrir ↗

Referência

CVE-2017-9813

CVE-2017-9813—

In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptNa

23RISCO

abrir ↗

Referência

CVE-2017-9813

CVE-2017-9813—

In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptNa

23RISCO

abrir ↗

Referência

CVE-2017-15291

CVE-2017-15291—

Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows

23RISCO

abrir ↗

Referência

CVE-2010-1544

CVE-2010-1544—

micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a lon

23RISCO

abrir ↗

Referência

CVE-2020-8778

CVE-2020-8778—

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document,

23RISCO

abrir ↗

Referência

CVE-2015-2084

CVE-2015-2084—

Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2015-2084

CVE-2015-2084—

Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote

23RISCO

abrir ↗

Referência

CVE-2015-6545

CVE-2015-6545—

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2015-6545

CVE-2015-6545—

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2018-12254

CVE-2018-12254—

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Online Grades 3.2.4 - Authentication Bypass

CVE-2009-0453—webappsphp

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, whi

23RISCO

abrir ↗

Referência

CVE-2019-11375

CVE-2019-11375—

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

23RISCO

abrir ↗

Referência

CVE-2019-11375

CVE-2019-11375—

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

23RISCO

abrir ↗

Referência✓ VexDay Proof

DMXReady Registration Manager 1.1 - Database Disclosure

CVE-2009-1821—webappsasp

DMXReady Registration Manager 1.1 stores sensitive information under the web root with insufficient access control, whic

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web Wiz Rich Text Editor 4.0 - Multiple Vulnerabilities

CVE-2008-0473—webappsasp

RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files v

23RISCO

abrir ↗

Referência✓ VexDay Proof

Noticeware Email Server 4.6.1.0 - Denial of Service

CVE-2008-1713—doswindows

MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application cras

23RISCO

abrir ↗

Referência✓ VexDay Proof

Scientific Image DataBase 0.41 - Blind SQL Injection

CVE-2008-2834—webappsphp

SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

CVE-2008-2835—webappsphp

SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.