Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.207exploits catalogados

36.011CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.696GitHub PoC 14.443VulnCheck XDB 8.773Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2016-4264

CVE-2016-4264—

The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attack

35RISCO

abrir ↗

Referência

CVE-2016-4312

CVE-2016-4312—

XML external entity (XXE) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH

23RISCO

abrir ↗

Referência

CVE-2016-4315

CVE-2016-4315—

Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authenticatio

23RISCO

abrir ↗

Referência

CVE-2016-4316

CVE-2016-4316—

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência✓ VexDay Proof

Transmit.app 3.5.5 - 'ftps://' URL Handler Heap Buffer Overflow (PoC)

CVE-2007-0020—dososx

Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote atta

23RISCO

abrir ↗

Referência

CVE-2016-4338

CVE-2016-4338—

The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x bef

28RISCO

abrir ↗

Referência

CVE-2016-4437

CVE-2016-4437CRITICALsob ataque

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB ACP User Registration Mod 1.0 - Remote File Inclusion

CVE-2006-5390—webappsphp

PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 modul

23RISCO

abrir ↗

Referência✓ VexDay Proof

Xfire 1.6.4 - Remote Denial of Service

CVE-2006-5391—doswindows

Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB Prillian French Mod 0.8.0 - Remote File Inclusion

CVE-2006-5309—webappsphp

PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPMyConferences 8.0.2 - 'menu.inc.php' File Inclusion

CVE-2006-5310—webappsphp

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.

23RISCO

abrir ↗

Referência

CVE-2016-4437

CVE-2016-4437CRITICALsob ataque

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack

100RISCO

abrir ↗

Referência✓ VexDay Proof

TribunaLibre 3.12 Beta - 'ftag.php' Remote File Inclusion

CVE-2006-5314—webappsphp

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

registroTL - 'main.php' Remote File Inclusion

CVE-2006-5315—webappsphp

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code

23RISCO

abrir ↗

Referência✓ VexDay Proof

eboli - 'index.php' Remote File Inclusion

CVE-2006-5317—webappsphp

PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Album Photo Sans Nom 1.6 - Remote Source Disclosure

CVE-2006-5320—webappsphp

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary fi

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB PlusXL 2.0_272 - 'constants.php' Remote File Inclusion

CVE-2006-5387—webappsphp

PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.01 - 'getsquad' SQL Injection

CVE-2006-5388—webappsphp

SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

ALiCE-CMS 0.1 - 'CONFIG[local_root]' Remote File Inclusion

CVE-2006-5433—webappsphp

PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execu

23RISCO

abrir ↗

Referência✓ VexDay Proof

P-News 1.16 - Remote File Inclusion

CVE-2006-5434—webappsphp

PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2026-8987

CVE-2026-8987CRITICAL

Authenticated Heap Overflow

48RISCO

abrir ↗

Referência

CVE-2026-69110

CVE-2026-69110CRITICAL

OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

48RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB News Defilante Horizontale 4.1.1 - Remote File Inclusion

CVE-2006-5415—webappsphp

PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpBB SearchIndexer Mod - 'archive_topic.php' Remote File Inclusion

CVE-2006-5418—webappsphp

PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer)

23RISCO

abrir ↗

Referência✓ VexDay Proof

Specimen Image Database - 'client.php' Remote File Inclusion

CVE-2006-5419—webappsphp

PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regis

23RISCO

abrir ↗

Referência✓ VexDay Proof

WSN Forum 1.3.4 - 'prestart.php' Remote Code Execution

CVE-2006-5421—webappsphp

WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoc

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoCal Calendar 1.1 - 'lcUser.php' Remote File Inclusion

CVE-2006-5426—webappsphp

PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPht Topsites - 'common.php' Remote File Inclusion

CVE-2006-5458—webappsphp

PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Open Meetings Filing Application - Remote File Inclusion

CVE-2006-5517—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.