Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.765exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.703Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-2127

CVE-2010-2127—

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2018-6411

CVE-2018-6411—

An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically

23RISCO

abrir ↗

Referência

CVE-2013-6246

CVE-2013-6246—

The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sens

23RISCO

abrir ↗

Referência

SoftExpert (SE) Suite v2.1.3 - Local File Inclusion

CVE-2023-30330CRITICALwebappsphp

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42

48RISCO

abrir ↗

Referência

CVE-2015-0935

CVE-2015-0935—

Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to

28RISCO

abrir ↗

Referência

CVE-2025-14879

CVE-2025-14879CRITICAL

Tenda WH450 HTTP Request onSSIDChange stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2014-0497

CVE-2014-0497HIGHsob ataque

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Ma

100RISCO

abrir ↗

Referência

CVE-2011-0519

CVE-2011-0519—

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyBlog: PHP and MySQL Blog/CMS software - Remote File Inclusion

CVE-2007-1968—webappsphp

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

CVE-2007-6555—webappsphp

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 componen

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPEasyData 1.5.4 - 'cat_id' SQL Injection

CVE-2008-2113—webappsphp

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2022-26982

CVE-2022-26982—

SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting

23RISCO

abrir ↗

Referência

CVE-2021-3394

CVE-2021-3394—

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISCO

abrir ↗

Referência

CVE-2012-4751

CVE-2012-4751—

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor

23RISCO

abrir ↗

Referência

CVE-2013-5692

CVE-2013-5692—

Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and

23RISCO

abrir ↗

Referência

CVE-2009-4964

CVE-2009-4964—

Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .

23RISCO

abrir ↗

Referência

CVE-2009-3338

CVE-2009-3338—

Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2009-3670

CVE-2009-3670—

Stack-based buffer overflow in KSP Sound Player 2009 R2 and R2.1 allows remote attackers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2017-13784

CVE-2017-13784—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2017-13785

CVE-2017-13785—

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud

23RISCO

abrir ↗

Referência

CVE-2014-0620

CVE-2014-0620—

Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component SMF Forum 1.3.1.3 - Remote File Inclusion

CVE-2006-3773—webappsphp

PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and M

23RISCO

abrir ↗

Referência

CVE-2014-4311

CVE-2014-4311—

Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allows attackers to obtain the (1) Database Connection and (2) E-mai

23RISCO

abrir ↗

Referência✓ VexDay Proof

Myspace Clone Script - 'index.php' Remote File Inclusion

CVE-2007-6057—webappsphp

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script (aka Myspace Clone Script) all

23RISCO

abrir ↗

Referência✓ VexDay Proof

TUTOS 1.3 - 'cmd.php' Remote Command Execution

CVE-2008-0148—webappsphp

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comman

23RISCO

abrir ↗

Referência✓ VexDay Proof

asg-sentry 7.0.0 - Multiple Vulnerabilities

CVE-2008-1320—dosmultiple

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary co

28RISCO

abrir ↗

Referência

CVE-2010-2920

CVE-2010-2920—

Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allow

38RISCO

abrir ↗

Referência

CVE-2016-4997

CVE-2016-4997—

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux

38RISCO

abrir ↗

Referência

CVE-2016-4997

CVE-2016-4997—

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.