Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.299exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.138VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2026-13578

CVE-2026-13578MEDIUM

itsourcecode Hospital Management System patientdetail.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13574

CVE-2026-13574MEDIUM

llvm llvm-project Bitcode File IntrinsicInst.cpp getBasePtr heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-13569

CVE-2026-13569MEDIUM

weng-xianhu EyouCMS API index.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6508—webappsjsp

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem

60RISCO

abrir ↗

Referência✓ VexDay Proof

Openfire Server 3.6.0a - Authentication Bypass / SQL Injection / Cross-Site Scripting

CVE-2008-6511—webappsjsp

Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arb

23RISCO

abrir ↗

Referência

Booked Scheduler 2.7.5 - Remote Command Execution (Metasploit)

CVE-2019-9581—webappsphp

phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitra

28RISCO

abrir ↗

Referência

AirDroid 4.2.1.6 - Denial of Service

CVE-2019-9599—dosandroid

The AirDroid application through 4.2.1.6 for Android allows remote attackers to cause a denial of service (service crash

28RISCO

abrir ↗

Referência

CVE-2026-10263

CVE-2026-10263MEDIUM

SourceCodester Computer Repair Shop Management System manage_product.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10245

CVE-2026-10245MEDIUM

SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10244

CVE-2026-10244MEDIUM

SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10243

CVE-2026-10243MEDIUM

code-projects Smart Parking System Admin Endpoint missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-9456

CVE-2026-9456CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9455

CVE-2026-9455CRITICAL

Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9454

CVE-2026-9454CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setOpenVpnCertGenerationCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9452

CVE-2026-9452MEDIUM

FoundDream miniclawd exec.ts ExecTool.execute os command injection

33RISCO

abrir ↗

Referência

CVE-2011-5139

CVE-2011-5139—

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2011-5139

CVE-2011-5139—

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2011-5161

CVE-2011-5161—

Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência

CVE-2018-25326

CVE-2018-25326HIGH

Google Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.php

41RISCO

abrir ↗

Referência

CVE-2018-25325

CVE-2018-25325HIGH

Woocommerce CSV Importer 3.3.6 Path Traversal File Deletion

41RISCO

abrir ↗

Referência

CVE-2018-25322

CVE-2018-25322HIGH

Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2018-25321

CVE-2018-25321MEDIUM

TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)

33RISCO

abrir ↗

Referência

CVE-2018-25320

CVE-2018-25320CRITICAL

ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution

48RISCO

abrir ↗

Referência

CVE-2018-25319

CVE-2018-25319HIGH

Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php

41RISCO

abrir ↗

Referência

CVE-2026-8753

CVE-2026-8753MEDIUM

kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection

33RISCO

abrir ↗

Referência

CVE-2026-8752

CVE-2026-8752MEDIUM

h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control

33RISCO

abrir ↗

Referência

CVE-2026-8751

CVE-2026-8751MEDIUM

h2oai h2o-3 JAR Model.java importBinaryModel deserialization

33RISCO

abrir ↗

Referência

CVE-2026-8750

CVE-2026-8750MEDIUM

h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.