Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2018-25346

CVE-2018-25346HIGH

WordPress Form Maker Plugin 1.12.24 SQL Injection via admin-ajax.php

41RISCO

abrir ↗

Referência

CVE-2018-25345

CVE-2018-25345HIGH

10-Strike Network Scanner 3.0 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2026-10202

CVE-2026-10202MEDIUM

OFCMS JSON Query SystemDictController.java query sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10201

CVE-2026-10201MEDIUM

Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero

33RISCO

abrir ↗

Referência

CVE-2026-10200

CVE-2026-10200MEDIUM

Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-10199

CVE-2026-10199MEDIUM

Assimp glTF2Asset.h LazyDict null pointer dereference

33RISCO

abrir ↗

Referência

CVE-2026-10191

CVE-2026-10191HIGH

Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-7553

CVE-2026-7553MEDIUM

code-projects Gym Management System edit_exercises.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7550

CVE-2026-7550MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7549

CVE-2026-7549MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7548

CVE-2026-7548HIGH

Totolink NR1800X cstecgi.cgi sub_41A68C command injection

41RISCO

abrir ↗

Referência

CVE-2026-7546

CVE-2026-7546CRITICAL

Totolink NR1800X lighttpd find_host_ip stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2018-25312

CVE-2018-25312HIGH

LifeSize ClearSea 3.1.4 Directory Traversal Remote Code Execution

41RISCO

abrir ↗

Referência

CVE-2018-25309

CVE-2018-25309MEDIUM

MyBB Recent threads 17.0 Persistent Cross-Site Scripting

33RISCO

abrir ↗

Referência

CVE-2018-25308

CVE-2018-25308HIGH

BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion

41RISCO

abrir ↗

Referência

CVE-2018-25307

CVE-2018-25307HIGH

SysGauge Pro 4.6.12 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-25306

CVE-2018-25306MEDIUM

PDFunite 0.41.0 Buffer Overflow via Malformed PDF

33RISCO

abrir ↗

Referência

CVE-2018-25305

CVE-2018-25305MEDIUM

librsvg2-bin 2.40.13 Buffer Overflow via Malformed SVG

33RISCO

abrir ↗

Referência

CVE-2026-7117

CVE-2026-7117MEDIUM

code-projects Employee Management System approve.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7116

CVE-2026-7116MEDIUM

code-projects Employee Management System mark.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7115

CVE-2026-7115MEDIUM

code-projects Employee Management System delete.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7114

CVE-2026-7114MEDIUM

code-projects Employee Management System edit.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10189

CVE-2026-10189HIGH

Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-7011

CVE-2026-7011MEDIUM

MaxSite CMS Antispam Plugin plugin_antispam cross site scripting

33RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Fusion Mod TI - 'id' SQL Injection

CVE-2008-5733—webappsphp

SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2019-3398

CVE-2019-3398HIGHsob ataque

Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote at

100RISCO

abrir ↗

Referência

CVE-2026-15377

CVE-2026-15377MEDIUM

Eleveo Call Recording Software sendlogfile improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15376

CVE-2026-15376MEDIUM

Eleveo Call Recording Software statisticReportAction.do improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15375

CVE-2026-15375MEDIUM

Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15374

CVE-2026-15374MEDIUM

Eleveo Call Recording Software Group roleAddAction.do improper authorization

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.