Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2010-1106

CVE-2010-1106—

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execut

23RISCO

abrir ↗

Referência

CVE-2014-4943

CVE-2014-4943—

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by

23RISCO

abrir ↗

Referência

CVE-2026-4163

CVE-2026-4163CRITICAL

Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection

48RISCO

abrir ↗

Referência✓ VexDay Proof

DesktopOnNet 3 Beta - Multiple Remote File Inclusions

CVE-2008-2649—webappsphp

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PH

23RISCO

abrir ↗

Referência

CVE-2018-5410

CVE-2018-5410—

Dokan file system driver contains a stack-based buffer overflow

23RISCO

abrir ↗

Referência

CVE-2014-9237

CVE-2014-9237—

SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Avlc Forum - 'vlc_forum.php' SQL Injection

CVE-2008-3200—webappsphp

SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2009-4156

CVE-2009-4156—

PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-63086

CVE-2026-63086MEDIUM

text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions

33RISCO

abrir ↗

Referência✓ VexDay Proof

Ad Manager Pro 2.6 - 'ipath' Remote File Inclusion

CVE-2006-3192—webappsphp

PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

LulieBlog 1.0.1 - Remote Authentication Bypass

CVE-2008-0329—webappsphp

LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_r

23RISCO

abrir ↗

Referência

CVE-2009-4661

CVE-2009-4661—

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial o

23RISCO

abrir ↗

Referência

CVE-2019-11193

CVE-2019-11193—

The FileManager in InfinitumIT DirectAdmin through v1.561 has XSS via CMD_FILE_MANAGER, CMD_SHOW_USER, and CMD_SHOW_RESE

23RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2018-7319

CVE-2018-7319—

SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system

23RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2016-8808

CVE-2016-8808—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RISCO

abrir ↗

Referência

CVE-2010-4967

CVE-2010-4967—

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2012-6042

CVE-2012-6042—

GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a ls

23RISCO

abrir ↗

Referência

CVE-2009-5094

CVE-2009-5094—

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2010-5019

CVE-2010-5019—

SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-2618

CVE-2010-2618—

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena

23RISCO

abrir ↗

Referência

CVE-2010-2618

CVE-2010-2618—

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena

23RISCO

abrir ↗

Referência

CVE-2015-5531

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Referência

CVE-2026-15622

CVE-2026-15622MEDIUM

poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization

33RISCO

abrir ↗

Referência

CVE-2026-15620

CVE-2026-15620MEDIUM

mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery

33RISCO

abrir ↗

Referência✓ VexDay Proof

Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion

CVE-2006-2284—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP co

23RISCO

abrir ↗

Referência

CVE-2014-4741

CVE-2014-4741—

SQL injection vulnerability in demo/ads.php in Artifectx xClassified 1.2 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2014-9242

CVE-2014-9242—

SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2011-4026

CVE-2011-4026—

SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.