Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.866exploits catalogados

35.812CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.573 exploits

Referência

CVE-2017-10129

CVE-2017-10129—

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version

23RISCO

abrir ↗

Referência

CVE-2026-70619

CVE-2026-70619HIGH

Odysseus Missing Admin Authorization via Embedding Endpoint Routes

41RISCO

abrir ↗

Referência

CVE-2010-0674

CVE-2010-0674—

StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2010-0674

CVE-2010-0674—

StatCounteX 3.1 stores sensitive information under the web root with insufficient access control, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2012-6048

CVE-2012-6048—

Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.

23RISCO

abrir ↗

Referência

CVE-2010-0939

CVE-2010-0939—

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows re

23RISCO

abrir ↗

Referência

CVE-2010-0939

CVE-2010-0939—

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows re

23RISCO

abrir ↗

Referência✓ VexDay Proof

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

CVE-2008-1506—webappsphp

PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpi

23RISCO

abrir ↗

Referência

CVE-2010-0765

CVE-2010-0765—

fipsForum 2.6 stores sensitive information under the web root with insufficient access control, which allows remote atta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kmita Mail 3.0 - 'file' Remote File Inclusion

CVE-2008-2199—webappsphp

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_g

23RISCO

abrir ↗

Referência

CVE-2004-1580

CVE-2004-1580—

SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2018-11532

CVE-2018-11532—

An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonst

23RISCO

abrir ↗

Referência

CVE-2009-2263

CVE-2009-2263—

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.2 - 'newuser.php' Arbitrary Add Admin

CVE-2008-2349—webappsphp

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direc

23RISCO

abrir ↗

Referência

CVE-2010-2721

CVE-2010-2721—

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-2721

CVE-2010-2721—

SQL injection vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

vhostadmin 0.1 - 'MODULES_DIR' Remote File Inclusion

CVE-2007-0558—webappsphp

PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to exe

23RISCO

abrir ↗

Referência✓ VexDay Proof

PacPoll 4.0 - Database Disclosure

CVE-2008-5981—webappsphp

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

webid 0.5.4 - Multiple Vulnerabilities

CVE-2008-7118—webappsphp

WeBid auction script 0.5.4 stores sensitive information under the web root with insufficient access control, which allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

jGallery 1.3 - 'index.php' Remote File Inclusion

CVE-2007-2158—webappsphp

PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência✓ VexDay Proof

Squirrelcart 1.x - 'cart.php' Remote File Inclusion

CVE-2007-4439—webappsphp

PHP remote file inclusion vulnerability in popup_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2012-1308

CVE-2012-1308—

Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2009-2332

CVE-2009-2332—

CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in

23RISCO

abrir ↗

Referência

CVE-2010-1741

CVE-2010-1741—

SQL injection vulnerability in request_account.php in Billwerx RC 5.2.2 PL2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting

CVE-2008-2296—webappsphp

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-4466

CVE-2009-4466—

DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev

23RISCO

abrir ↗

Referência

CVE-2015-6911

CVE-2015-6911—

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2017-1000371

CVE-2017-1000371—

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1

23RISCO

abrir ↗

Referência

CVE-2017-1000371

CVE-2017-1000371—

The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and 1

23RISCO

abrir ↗

Referência

CVE-2013-0807

CVE-2013-0807—

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.