Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.012exploits catalogados

35.274CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.072VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

DodosMail 2.0.1 - 'dodosmail.php' Remote File Inclusion

CVE-2006-5841—webappsphp

Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, al

23RISCO

abrir ↗

Referência

CVE-2016-4117

CVE-2016-4117HIGHsob ataque

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as

100RISCO

abrir ↗

Referência✓ VexDay Proof

Essentia Web Server 2.15 - GET Remote Denial of Service

CVE-2006-5850—doswindows

Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code vi

23RISCO

abrir ↗

Referência

CVE-2018-19041

CVE-2018-19041—

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the

23RISCO

abrir ↗

Referência

CVE-2022-47877

CVE-2022-47877CRITICAL

A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web

48RISCO

abrir ↗

Referência

CVE-2017-12971

CVE-2017-12971—

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or

23RISCO

abrir ↗

Referência

CVE-2010-4330

CVE-2010-4330—

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-27476

CVE-2026-27476CRITICAL

RustFly 2.0.0 Command Injection via UDP Remote Control

48RISCO

abrir ↗

Referência

CVE-2023-23286

CVE-2023-23286MEDIUM

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the s

33RISCO

abrir ↗

Referência

CVE-2018-18760

CVE-2018-18760—

RhinOS 3.0 build 1190 allows CSRF.

23RISCO

abrir ↗

Referência

CVE-2018-18760

CVE-2018-18760—

RhinOS 3.0 build 1190 allows CSRF.

23RISCO

abrir ↗

Referência

CVE-2019-11564

CVE-2019-11564—

A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HT

23RISCO

abrir ↗

Referência

CVE-2010-1301

CVE-2010-1301—

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-1301

CVE-2010-1301—

SQL injection vulnerability in main.php in Centreon 2.1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2017-8382

CVE-2017-8382—

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc

23RISCO

abrir ↗

Referência

CVE-2017-8382

CVE-2017-8382—

admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Socketwiz BookMarks 2.0 - 'root_dir' Remote File Inclusion

CVE-2006-7069—webappsphp

PHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attack

23RISCO

abrir ↗

Referência

CVE-2014-2089

CVE-2014-2089—

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .

23RISCO

abrir ↗

Referência✓ VexDay Proof

gCards 1.45 - Multiple Vulnerabilities

CVE-2006-1347—webappsphp

SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

CVE-2007-1224—remotewindows

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyNews 1.13 RC2 - 'POST' SQL Injection

CVE-2008-2823—webappsphp

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

APC ActionApps CMS 2.8.1 - Remote File Inclusion

CVE-2006-2686—webappsphp

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a

28RISCO

abrir ↗

Referência

CVE-2011-1714

CVE-2011-1714—

Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and pos

23RISCO

abrir ↗

Referência

CVE-2003-1325

CVE-2003-1325—

The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows r

23RISCO

abrir ↗

Referência

CVE-2018-5986

CVE-2018-5986—

SQL Injection exists in Easy Car Script 2014 via the s_order or s_row parameter to site_search.php.

23RISCO

abrir ↗

Referência

CVE-2018-12650

CVE-2018-12650—

Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeSe

23RISCO

abrir ↗

Referência

CVE-2023-4744

CVE-2023-4744CRITICAL

Tenda AC8 formSetDeviceName stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2018-12653

CVE-2018-12653—

A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious Jav

23RISCO

abrir ↗

Referência✓ VexDay Proof

Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion

CVE-2006-2730—webappsphp

PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when regi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion

CVE-2006-6720—webappsphp

PHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote attackers to execute a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.