Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2026-70619

CVE-2026-70619HIGH

Odysseus Missing Admin Authorization via Embedding Endpoint Routes

41RISCO

abrir ↗

Referência

CVE-2026-70619

CVE-2026-70619HIGH

Odysseus Missing Admin Authorization via Embedding Endpoint Routes

41RISCO

abrir ↗

Referência

CVE-2026-70620

CVE-2026-70620MEDIUM

Odysseus SSRF via Embedding Endpoint Configuration

33RISCO

abrir ↗

Referência✓ VexDay Proof

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

CVE-2008-1124—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component garyscookbook 1.1.1 - SQL Injection

CVE-2008-1137—webappsphp

SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!

23RISCO

abrir ↗

Referência

CVE-2021-40539

CVE-2021-40539CRITICALsob ataqueransomware

Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resulta

100RISCO

abrir ↗

Referência

CVE-2019-3929

CVE-2019-3929CRITICALsob ataque

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RISCO

abrir ↗

Referência

CVE-2019-3929

CVE-2019-3929CRITICALsob ataque

The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Ba

100RISCO

abrir ↗

Referência

CVE-2019-25676

CVE-2019-25676HIGH

Ask Expert Script 3.0.5 Cross Site Scripting SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-9791

CVE-2017-9791CRITICALsob ataque

The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe

100RISCO

abrir ↗

Referência

CVE-2010-4185

CVE-2010-4185—

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-4210

CVE-2010-4210—

The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previo

23RISCO

abrir ↗

Referência

CVE-2012-3152

CVE-2012-3152CRITICALsob ataque

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

100RISCO

abrir ↗

Referência

CVE-2018-15473

CVE-2018-15473MEDIUM

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Referência

CVE-2026-16293

CVE-2026-16293MEDIUM

Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL

33RISCO

abrir ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1345—webappsphp

Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft EasyCalendar 4.0tr and ear

23RISCO

abrir ↗

Referência

CVE-2010-4636

CVE-2010-4636—

SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4638

CVE-2010-4638—

SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0

23RISCO

abrir ↗

Referência

CVE-2010-4737

CVE-2010-4737—

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4738

CVE-2010-4738—

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attac

23RISCO

abrir ↗

Referência

CVE-2010-4740

CVE-2010-4740—

Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote

50RISCO

abrir ↗

Referência

CVE-2010-4770

CVE-2010-4770—

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-4770

CVE-2010-4770—

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-4771

CVE-2010-4771—

SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-4772

CVE-2010-4772—

Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web

23RISCO

abrir ↗

Referência

CVE-2015-1427

CVE-2015-1427CRITICALsob ataque

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s

100RISCO

abrir ↗

Referência

CVE-2010-4774

CVE-2010-4774—

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2010-4776

CVE-2010-4776—

SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-4776

CVE-2010-4776—

SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2016-1287

CVE-2016-1287—

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0

45RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.