Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2026-76799

CVE-2026-76799MEDIUM

code-projects Login Registration System SQL Database Backup login_registration_system.sql file access

33RISCO

abrir ↗

Referência

CVE-2010-2115

CVE-2010-2115—

SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted

50RISCO

abrir ↗

Referência✓ VexDay Proof

Wsn (Multiple Products) - Local File Inclusion / Code Execution

CVE-2008-3555—webappsphp

Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Rianxosencabos CMS 0.9 - Arbitrary Add Admin

CVE-2008-4245—webappsphp

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authent

23RISCO

abrir ↗

Referência✓ VexDay Proof

eDNews 2.0 - Local File Inclusion

CVE-2008-5819—webappsphp

Directory traversal vulnerability in eDNews_archive.php in eDreamers eDNews 2, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

emergecolab 1.0 - 'sitecode' Local File Inclusion

CVE-2008-5990—webappsphp

Directory traversal vulnerability in connect/init.inc in emergecolab 1.0 allows remote attackers to include and execute

23RISCO

abrir ↗

Referência

CVE-2024-34833

CVE-2024-34833CRITICAL

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settin

48RISCO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RISCO

abrir ↗

Referência

CVE-2021-4434

CVE-2021-4434CRITICAL

Social Warfare <= 3.5.2 - Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2012-2105

CVE-2012-2105—

Multiple SQL injection vulnerabilities in login.php in Timesheet Next Gen 1.5.2 allow remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-3419

CVE-2010-3419—

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 2.2.3 allow remote atta

23RISCO

abrir ↗

Referência

CVE-2015-6568

CVE-2015-6568—

Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mole 2.1.0 - 'viewsource.php' Remote File Disclosure

CVE-2008-1857—webappsphp

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-76590

CVE-2026-76590CRITICAL

TRENDnet TEW-755AP ssi wan.cgi stack-based overflow

48RISCO

abrir ↗

Referência✓ VexDay Proof

Vivvo Article Manager 3.4 - 'root' Local File Inclusion

CVE-2007-1031—webappsphp

Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote att

23RISCO

abrir ↗

Referência

CVE-2011-0635

CVE-2011-0635—

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

SiteAdmin CMS - 'art' SQL Injection

CVE-2008-3414—webappsphp

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2009-3201

CVE-2009-3201—

Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (appli

23RISCO

abrir ↗

Referência

CVE-2019-12801

CVE-2019-12801—

out/out.GroupMgr.php in SeedDMS 5.1.11 has Stored XSS by making a new group with a JavaScript payload as the "GROUP" Nam

23RISCO

abrir ↗

Referência

CVE-2009-3211

CVE-2009-3211—

Directory traversal vulnerability in VivaPrograms Infinity Script 2.x.x, when magic_quotes_gpc is disabled, allows remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpclanwebsite 1.23.3 fix pack #5 - Multiple Vulnerabilities

CVE-2008-5878—webappsphp

Multiple directory traversal vulnerabilities in Phpclanwebsite (aka PCW) 1.23.3 Fix Pack 5 and earlier, when magic_quote

23RISCO

abrir ↗

Referência

CVE-2018-19829

CVE-2018-19829—

Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution

CVE-2008-6773—webappsphp

Static code injection vulnerability in user/internettoolbar/edit.php in YourPlace 1.0.2 and earlier allows remote authen

23RISCO

abrir ↗

Referência✓ VexDay Proof

2532/Gigs 1.2.2 Stable - Multiple Vulnerabilities

CVE-2008-6901—webappsphp

Multiple directory traversal vulnerabilities in 2532designs 2532|Gigs 1.2.2 Stable, when register_globals is enabled and

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPRunner 4.2 - 'SearchOption' Blind SQL Injection

CVE-2009-0964—webappsphp

UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows at

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File

CVE-2009-2101—webappsphp

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote at

23RISCO

abrir ↗

Referência

CVE-2010-5046

CVE-2010-5046—

Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script o

23RISCO

abrir ↗

Referência

CVE-2012-6517

CVE-2012-6517—

Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência

CVE-2012-6517

CVE-2012-6517—

Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script

23RISCO

abrir ↗

Referência✓ VexDay Proof

TopperMod 1.0 - 'mod.php' Local File Inclusion

CVE-2008-1553—webappsphp

Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary l

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.