Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2026-8196

CVE-2026-8196MEDIUM

JeecgBoot mLogin Endpoint LoginController.java authorization

33RISCO

abrir ↗

Referência✓ VexDay Proof

Free Directory Script 1.1.1 - 'API_HOME_DIR' Remote File Inclusion

CVE-2008-6305—webappsphp

PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, al

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Link Back Checker 1 - Insecure Cookie Handling

CVE-2008-6307—webappsphp

E-topbiz Link Back Checker 1 allows remote attackers to bypass authentication and gain administrative access by setting

23RISCO

abrir ↗

Referência✓ VexDay Proof

E Annu 1.0 - Authentication Bypass / SQL Injection

CVE-2006-5666—webappsphp

SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

PunBB (Private Messaging System 1.2.x) - Multiple Local File Inclusions

CVE-2008-6308—webappsphp

Multiple directory traversal vulnerabilities in Private Messaging System (PMS) 1.2.3 and earlier for PunBB allow remote

23RISCO

abrir ↗

Referência

CVE-2026-7238

CVE-2026-7238MEDIUM

code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-7237

CVE-2026-7237MEDIUM

AgiFlow scaffold-mcp write-to-file Tool index.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7235

CVE-2026-7235MEDIUM

ErlichLiu claude-agent-sdk-master route.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7234

CVE-2026-7234MEDIUM

BrowserOperator browser-operator-core server.js startsWith path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7233

CVE-2026-7233MEDIUM

Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds

33RISCO

abrir ↗

Referência✓ VexDay Proof

cf shopkart 5.2.2 - SQL Injection / File Disclosure

CVE-2008-6320—webappsasp

SQL injection vulnerability in index.cfm in CF Shopkart 5.2.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-4999

CVE-2010-4999—

SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

CFMBLOG - 'categorynbr' Blind SQL Injection

CVE-2008-6322—webappsasp

SQL injection vulnerability in index.cfm in CFMSource CFMBlog allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Auction - Blind SQL Injection

CVE-2008-6323—webappsasp

SQL injection vulnerability in forummessages.cfm in CFMSource CF_Auction allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência✓ VexDay Proof

CF_Forum - Blind SQL Injection

CVE-2008-6324—webappsasp

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

ProQuiz 1.0 - Authentication Bypass

CVE-2008-6327—webappsphp

SQL injection vulnerability in index.php in ProQuiz 1.0 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2010-3742

CVE-2010-3742—

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attac

23RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

CVE-2008-6328—webappsphp

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pre Job Board - Authentication Bypass

CVE-2008-6329—webappsphp

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyTopix 1.3.0 - SQL Injection

CVE-2008-6330—webappsphp

SQL injection vulnerability in index.php in MyTopix 1.3.0 and earlier allows remote authenticated users to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

Simple Customer 1.2 - Authentication Bypass

CVE-2008-6332—webappsphp

SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

RSS Simple News - SQL Injection

CVE-2008-6333—webappsphp

SQL injection vulnerability in news.php in RSS Simple News (RSSSN), when magic_quotes_gpc is disabled, allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

PostNuke 0.763 - 'PNSV lang' Remote Code Execution

CVE-2006-5733—webappsphp

Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and exec

23RISCO

abrir ↗

Referência

CVE-2026-7226

CVE-2026-7226MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7225

CVE-2026-7225MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7224

CVE-2026-7224MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7223

CVE-2026-7223MEDIUM

BigSweetPotatoStudio HyperChat AI Proxy Middleware aiProxyMiddleware.mts fetch server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-7216

CVE-2026-7216MEDIUM

donchelo processing-claude-mcp-bridge create_sketch Tool processing_server.py path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7215

CVE-2026-7215MEDIUM

egtai gmx-vmd-mcp VMD Launch mcp_server.py launch_vmd_gui_tool command injection

33RISCO

abrir ↗

Referência

CVE-2010-3856

CVE-2010-3856—

ld.so in the GNU C Library (aka glibc or libc6) before 2.11.3, and 2.12.x before 2.12.2, does not properly restrict use

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.