Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.573 exploits

Referência✓ VexDay Proof

MiNBank 1.5.0 - Multiple Remote File Inclusions

CVE-2008-6006—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to

23RISCO

abrir ↗

Referência

CVE-2009-20010

CVE-2009-20010CRITICAL

Dogfood CRM spell.php RCE

63RISCO

abrir ↗

Referência

CVE-2009-20010

CVE-2009-20010CRITICAL

Dogfood CRM spell.php RCE

63RISCO

abrir ↗

Referência

CVE-2013-6873

CVE-2013-6873—

SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion

CVE-2008-6402—webappsphp

PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows r

23RISCO

abrir ↗

Referência

CVE-2010-1945

CVE-2010-1945—

Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all

23RISCO

abrir ↗

Referência✓ VexDay Proof

pagetree CMS 0.0.2 Beta 0001 - Remote File Inclusion

CVE-2008-7067—webappsphp

PHP remote file inclusion vulnerability in admin/plugins/Online_Users/main.php in PageTree CMS 0.0.2 BETA 0001 allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

webframe 0.76 - Multiple File Inclusions

CVE-2009-0514—webappsphp

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary lo

23RISCO

abrir ↗

Referência✓ VexDay Proof

Potato News 1.0.0 - Local File Inclusion

CVE-2009-0722—webappsphp

Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteX 0.7.4.418 - 'THEME_FOLDER' Local File Inclusion

CVE-2009-1846—webappsphp

Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and

23RISCO

abrir ↗

Referência

CVE-2010-1537

CVE-2010-1537—

Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arb

23RISCO

abrir ↗

Referência

CVE-2010-1537

CVE-2010-1537—

Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arb

23RISCO

abrir ↗

Referência

CVE-2009-3809

CVE-2009-3809—

Acoustica MP3 Audio Mixer 1.0 and possibly 2.471 allows remote attackers to cause a denial of service (crash) via a long

23RISCO

abrir ↗

Referência

CVE-2012-1978

CVE-2012-1978—

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2019-6588

CVE-2019-6588—

In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsani

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPSpamManager 0.53b - 'body.php' Remote File Disclosure

CVE-2008-1645—webappsphp

Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbitr

23RISCO

abrir ↗

Referência

CVE-2017-7472

CVE-2017-7472—

The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumptio

23RISCO

abrir ↗

Referência

CVE-2015-4852

CVE-2015-4852CRITICALsob ataque

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Media Encoder (XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)

CVE-2008-3008—remotewindows

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9

50RISCO

abrir ↗

Referência

CVE-2016-4807

CVE-2016-4807—

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS

23RISCO

abrir ↗

Referência

OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)

CVE-2026-46368HIGHlocalmultiple

luci-app-https-dns-proxy Authenticated Command Injection via setInitAction

41RISCO

abrir ↗

Referência

CVE-2009-4750

CVE-2009-4750—

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP c

23RISCO

abrir ↗

Referência

CVE-2013-5311

CVE-2013-5311—

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2013-4946

CVE-2013-4946—

Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2015-4852

CVE-2015-4852CRITICALsob ataque

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers

100RISCO

abrir ↗

Referência

CVE-2012-5226

CVE-2012-5226—

Multiple cross-site scripting (XSS) vulnerabilities in Peel SHOPPING 2.8 and 2.9 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2018-15686

CVE-2018-15686HIGH

systemd: reexec state injection: fgets() on overlong lines leads to line splitting

41RISCO

abrir ↗

Referência✓ VexDay Proof

Arctic Issue Tracker 2.0.0 - 'filter' SQL Injection (1)

CVE-2008-3250—webappsphp

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection

CVE-2008-5776—webappsphp

Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

ravennuke 2.3.0 - Multiple Vulnerabilities

CVE-2009-0674—webappsphp

images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows re

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.