Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.131exploits catalogados

35.957CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.418VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-19992

CVE-2026-19992LOW

Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure

28RISCO

abrir ↗

Referência

CVE-2015-2797

CVE-2015-2797—

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 502

60RISCO

abrir ↗

Referência

CVE-2018-11715

CVE-2018-11715—

The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject.

23RISCO

abrir ↗

Referência

CVE-2023-26692

CVE-2023-26692MEDIUM

ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Manageme

33RISCO

abrir ↗

Referência

CVE-2014-2088

CVE-2014-2088—

Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2014-3991

CVE-2014-3991—

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2011-3645

CVE-2011-3645—

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

CVE-2008-2215—webappsphp

Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2010-0799

CVE-2010-0799—

Directory traversal vulnerability in misc/tell_a_friend/tell.php in phpunity.newsmanager allows remote attackers to read

23RISCO

abrir ↗

Referência

CVE-2010-2677

CVE-2010-2677—

PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência

CVE-2010-2677

CVE-2010-2677—

PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is dis

23RISCO

abrir ↗

Referência✓ VexDay Proof

V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion

CVE-2006-2666—webappsphp

PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

FreeLyrics 1.0 - Remote File Disclosure

CVE-2008-5861—webappsphp

Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via di

23RISCO

abrir ↗

Referência✓ VexDay Proof

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

CVE-2008-5979—webappsphp

Cross-site scripting (XSS) vulnerability in default.asp in Ocean12 Mailing List Manager Gold allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method

CVE-2008-6496—doswindows

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT

23RISCO

abrir ↗

Referência✓ VexDay Proof

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities

CVE-2009-2080—webappsphp

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obta

23RISCO

abrir ↗

Referência

CVE-2014-5140

CVE-2014-5140—

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha

23RISCO

abrir ↗

Referência

CVE-2014-5140

CVE-2014-5140—

The bindReplace function in the query factory in includes/classes/database.php in Loaded Commerce 7 does not properly ha

23RISCO

abrir ↗

Referência

CVE-2010-1478

CVE-2010-1478—

Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allow

38RISCO

abrir ↗

Referência

CVE-2026-19974

CVE-2026-19974MEDIUM

treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication

33RISCO

abrir ↗

Referência

CVE-2009-20007

CVE-2009-20007CRITICAL

Talkative IRC v0.4.4.16 Response Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2009-20007

CVE-2009-20007CRITICAL

Talkative IRC v0.4.4.16 Response Buffer Overflow

63RISCO

abrir ↗

Referência

CVE-2026-19973

CVE-2026-19973MEDIUM

itsourcecode Hospital Management System viewpaymentreport.php sql injection

33RISCO

abrir ↗

Referência

CVE-2009-2641

CVE-2009-2641—

PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote att

23RISCO

abrir ↗

Referência

CVE-2010-4099

CVE-2010-4099—

ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary c

23RISCO

abrir ↗

Referência

CVE-2026-19972

CVE-2026-19972MEDIUM

itsourcecode Hospital Management System viewpatient.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-12326

CVE-2018-12326—

Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution

23RISCO

abrir ↗

Referência✓ VexDay Proof

MycroCMS 0.5 - Blind SQL Injection

CVE-2008-2770—webappsphp

SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2020-35416

CVE-2020-35416—

Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.