Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2023-3342

CVE-2023-3342CRITICAL

User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

48RISCO

abrir ↗

Referência

CVE-2026-15384

CVE-2026-15384MEDIUM

Manual Image Crop < 1.15 - Subscriber+ Arbitrary Attachment Image Overwrite via IDOR

33RISCO

abrir ↗

Referência

CVE-2010-0706

CVE-2010-0706—

Cross-site scripting (XSS) vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows re

23RISCO

abrir ↗

Referência

CVE-2009-4382

CVE-2009-4382—

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje

23RISCO

abrir ↗

Referência

CVE-2009-4382

CVE-2009-4382—

Cross-site scripting (XSS) vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inje

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5879—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, allows

23RISCO

abrir ↗

Referência

CVE-2010-0675

CVE-2010-0675—

Cross-site scripting (XSS) vulnerability in index.php in BGSvetionik BGS CMS 2.2.1 allows remote attackers to inject arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

BandSite CMS 1.1.1 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-3193—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, al

28RISCO

abrir ↗

Referência

CVE-2010-2256

CVE-2010-2256—

Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-2256

CVE-2010-2256—

Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-1872

CVE-2010-1872—

Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

CVE-2008-6248—webappsphp

Cross-site scripting (XSS) vulnerability in all.php in Galatolo WebManager 1.3a and earlier allows remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2008-6278

CVE-2008-6278—

Multiple cross-site scripting (XSS) vulnerabilities in product.php in RakhiSoftware Price Comparison Script (aka Shoppin

23RISCO

abrir ↗

Referência

CVE-2010-1091

CVE-2010-1091—

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2010-1091

CVE-2010-1091—

Multiple cross-site scripting (XSS) vulnerabilities in contact.php in phpMySite allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2009-4934

CVE-2009-4934—

Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2009-2241

CVE-2009-2241—

Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to injec

23RISCO

abrir ↗

Referência

CVE-2009-4813

CVE-2009-4813—

Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inj

23RISCO

abrir ↗

Referência

CVE-2010-2457

CVE-2010-2457—

Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

DD-WRT HTTPd Daemon/Service - Remote Command Execution

CVE-2008-6974—remotehardware

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attack

23RISCO

abrir ↗

Referência

CVE-2009-4266

CVE-2009-4266—

Cross-site scripting (XSS) vulnerability in search.php in YABSoft Advanced Image Hosting (AIH) Script 2.2, and possibly

23RISCO

abrir ↗

Referência

CVE-2010-1048

CVE-2010-1048—

Cross-site scripting (XSS) vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arb

23RISCO

abrir ↗

Referência

CVE-2017-0312

CVE-2017-0312—

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handle

23RISCO

abrir ↗

Referência

CVE-2015-7944

CVE-2015-7944—

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

28RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JoomlaXplorer 1.6.2 - Remote s

CVE-2008-1848—webappsphp

Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earl

23RISCO

abrir ↗

Referência

CVE-2022-30004

CVE-2022-30004CRITICAL

Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing

48RISCO

abrir ↗

Referência

CVE-2008-4174

CVE-2008-4174—

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1 allow remote attackers to i

23RISCO

abrir ↗

Referência

CVE-2008-6500

CVE-2008-6500—

Cross-site scripting (XSS) vulnerability in CodeToad ASP Shopping Cart Script allows remote attackers to inject arbitrar

23RISCO

abrir ↗

Referência

CVE-2010-1606

CVE-2010-1606—

Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-1606

CVE-2010-1606—

Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.