Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.401exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.332 exploits

Referência

CVE-2019-1652

CVE-2019-1652HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência

CVE-2004-1444

CVE-2004-1444—

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (d

23RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1653

CVE-2019-1653HIGHsob ataque

Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability

100RISCO

abrir ↗

Referência

CVE-2026-19210

CVE-2026-19210MEDIUM

SourceCodester Photo Share Website ajax.php save_upload unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-19209

CVE-2026-19209MEDIUM

SourceCodester Photo Share Website index.php home cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-19208

CVE-2026-19208MEDIUM

WonderTrader TraderDD.cpp queryTrades behavioral workflow

33RISCO

abrir ↗

Referência

CVE-2026-19207

CVE-2026-19207MEDIUM

PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2022-4995

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

48RISCO

abrir ↗

Referência

CVE-2026-65707

CVE-2026-65707HIGH

Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-12689

CVE-2026-12689MEDIUM

ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization

33RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Referência✓ VexDay Proof

AspWebCalendar 4.5 - 'eventid' SQL Injection

CVE-2004-1552—webappsasp

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the us

23RISCO

abrir ↗

Referência

CVE-2026-16486

CVE-2026-16486MEDIUM

SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-16252

CVE-2026-16252MEDIUM

Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection

33RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1663

CVE-2019-1663CRITICAL

Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

85RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Multiple Vulnerabilities

CVE-2004-1553—webappsasp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência✓ VexDay Proof

aspwebalbum 3.2 - Arbitrary File Upload / SQL Injection / Cross-Site Scripting

CVE-2004-1553—webappsphp

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the usern

23RISCO

abrir ↗

Referência

CVE-2022-4995

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

48RISCO

abrir ↗

Referência

CVE-2026-11466

CVE-2026-11466MEDIUM

zilliztech deep-searcher collection_router.py CollectionRouter.invoke access control

33RISCO

abrir ↗

Referência

CVE-2026-11462

CVE-2026-11462MEDIUM

Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-11461

CVE-2026-11461MEDIUM

NousResearch hermes-agent resume Endpoint hermes_state.py resolve_session_by_title authorization

33RISCO

abrir ↗

Referência

CVE-2026-11460

CVE-2026-11460MEDIUM

Boost Serialization improper validation of specified type of input

33RISCO

abrir ↗

Referência

CVE-2026-49494

CVE-2026-49494HIGH

Xcitium Client Security / Comodo Internet Security Remote Denial of Service

41RISCO

abrir ↗

Referência

CVE-2026-11456

CVE-2026-11456MEDIUM

Chanjet CRM HTTP GET Request jxf_dump_systable.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11453

CVE-2026-11453MEDIUM

Tiobon Employee Self-Service System Login Endpoint BlogSearch.aspx sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15629

CVE-2026-15629MEDIUM

louisho5 picobot Workspace filesystem.go GetSkill link following

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.