Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2026-19230

CVE-2026-19230MEDIUM

SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting

33RISCO

Referência

CVE-2026-19207

CVE-2026-19207MEDIUM

PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

33RISCO

Referência

CVE-2022-4995

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

48RISCO

Referência

CVE-2022-4995

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

48RISCO

Referência

CVE-2026-15148

CVE-2026-15148MEDIUM

WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR

33RISCO

Referência

CVE-2015-6104

CVE-2015-6104—

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

35RISCO

Referência

CVE-2015-6104

CVE-2015-6104—

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

35RISCO

Referência

CVE-2015-6152

CVE-2015-6152—

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory co

35RISCO

Referência

CVE-2015-6541

CVE-2015-6541—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) be

23RISCO

Referência

CVE-2026-15245

CVE-2026-15245MEDIUM

BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode

33RISCO

Referência

CVE-2026-15215

CVE-2026-15215HIGH

Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation

41RISCO

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Referência

CVE-2014-6271

CVE-2014-6271CRITICALsob ataque

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Referência

CVE-2026-70636

CVE-2026-70636HIGH

Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint

41RISCO

Referência

CVE-2026-67622

CVE-2026-67622HIGH

Flowise 3.1.4 IDOR in OpenAI Assistants Integration

41RISCO

Referência

CVE-2026-67621

CVE-2026-67621HIGH

Flowise 3.1.4 Missing Authorization on Document Store Mutation Endpoints

41RISCO

Referência

CVE-2026-19110

CVE-2026-19110MEDIUM

DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting

33RISCO

Referência

CVE-2026-19071

CVE-2026-19071MEDIUM

itsourcecode Hospital Management System viewappointment.php sql injection

33RISCO

Referência

CVE-2026-19070

CVE-2026-19070MEDIUM

itsourcecode Hospital Management System viewadmin.php sql injection

33RISCO

Referência

CVE-2015-7257

CVE-2015-7257—

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrato

23RISCO

Referência

CVE-2015-7257

CVE-2015-7257—

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrato

23RISCO

Referência

CVE-2015-7258

CVE-2015-7258—

ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain

28RISCO

Referência

CVE-2015-7297

CVE-2015-7297—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RISCO

Referência

CVE-2026-17515

CVE-2026-17515MEDIUM

MLS Import < 7.0.4 - Subscriber+ Sensitive Information Disclosure via mlsimport_logger_per_item

33RISCO

Referência

CVE-2026-16055

CVE-2026-16055HIGH

Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_login

41RISCO

Referência

CVE-2026-16942

CVE-2026-16942MEDIUM

WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS

33RISCO

Referência

CVE-2026-16940

CVE-2026-16940CRITICAL

Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal

48RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.