Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2008-5072

CVE-2008-5072—

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência

CVE-2026-8383

CVE-2026-8383MEDIUM

LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API

48RISCO

abrir ↗

Referência

CVE-2018-7465

CVE-2018-7465—

An XSS issue was discovered in VirtueMart before 3.2.14. All the textareas in the backend of the plugin can be closed by

23RISCO

abrir ↗

Referência

CVE-2026-12202

CVE-2026-12202MEDIUM

Intelliants Subrion CMS Blocks Endpoint cross site scripting

33RISCO

abrir ↗

Referência

CVE-2009-4465

CVE-2009-4465—

DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attac

23RISCO

abrir ↗

Referência

CVE-2017-9650

CVE-2017-9650—

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL

23RISCO

abrir ↗

Referência

CVE-2013-5640

CVE-2013-5640—

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2013-5640

CVE-2013-5640—

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (

23RISCO

abrir ↗

Referência

CVE-2010-3480

CVE-2010-3480—

Directory traversal vulnerability in index.php in ApPHP PHP MicroCMS 1.0.1, when magic_quotes_gpc is disabled, allows re

23RISCO

abrir ↗

Referência

CVE-2012-6557

CVE-2012-6557—

Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attacker

23RISCO

abrir ↗

Referência

CVE-2011-5041

CVE-2011-5041—

Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência

CVE-2012-10038

CVE-2012-10038CRITICAL

Auxilium RateMyPet Arbitrary File Upload RCE

63RISCO

abrir ↗

Referência✓ VexDay Proof

Mafia Scum Tools 2.0.0 - 'index.php?gen' Remote File Inclusion

CVE-2007-0501—webappsphp

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Genera

23RISCO

abrir ↗

Referência✓ VexDay Proof

torrentflux 2.2 - Arbitrary File Create/ Execute/Delete

CVE-2006-6328—webappsphp

Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'ibase_connect()' Local Buffer Overflow

CVE-2007-1475—localwindows

Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Integramod Nederland 1.4.2 - Remote File Inclusion

CVE-2007-5140—webappsphp

PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in IntegraMOD Nederland 1.4.2 allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

teatro 1.6 - 'basePath' Remote File Inclusion

CVE-2007-5780—webappsphp

PHP remote file inclusion vulnerability in pub/pub08_comments.php in teatro 1.6 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion

CVE-2007-6475—webappsphp

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

VHD Web Pack 2.0 - 'index.php' Local File Inclusion

CVE-2008-0609—webappsphp

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

LightBlog 9.6 - 'Username' Local File Inclusion

CVE-2008-0840—webappsphp

Directory traversal vulnerability in view_member.php in Public Warehouse LightBlog 9.6 allows remote attackers to includ

23RISCO

abrir ↗

Referência✓ VexDay Proof

GNU/Gallery 1.1.1.0 - 'admin.php' Local File Inclusion

CVE-2008-2353—webappsphp

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting

CVE-2008-2963—webappsphp

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

ResearchGuide 0.5 - 'id' SQL Injection

CVE-2008-2964—webappsphp

SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

CVE-2008-5072—doswindows

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash)

23RISCO

abrir ↗

Referência

CVE-2026-11528

CVE-2026-11528HIGH

Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

CNStats 2.9 - 'who_r.php?bj' Remote File Inclusion

CVE-2007-2086—webappsphp

Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code v

23RISCO

abrir ↗

Referência

CVE-2009-4796

CVE-2009-4796—

Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in

23RISCO

abrir ↗

Referência✓ VexDay Proof

Flip 3.0 - Remote Admin Creation

CVE-2007-5062—webappsphp

account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un

23RISCO

abrir ↗

Referência

CVE-2016-5312

CVE-2016-5312—

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote au

35RISCO

abrir ↗

Referência

CVE-2010-4865

CVE-2010-4865—

SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to e

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.