Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência

CVE-2026-7728

CVE-2026-7728MEDIUM

ryanjoachim mcp-rtfm MCP update_doc path traversal

33RISCO

abrir ↗

Referência✓ VexDay Proof

Smoothflash - 'cid' SQL Injection

CVE-2008-1623—webappsphp

SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

CVE-2008-6077—webappsphp

SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to exe

23RISCO

abrir ↗

Referência

CVE-2018-5189

CVE-2018-5189—

Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain syste

23RISCO

abrir ↗

Referência✓ VexDay Proof

KISGB (tmp_theme) 5.1.1 - Local File Inclusion

CVE-2008-1635—webappsphp

Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remo

23RISCO

abrir ↗

Referência

CVE-2012-0782

CVE-2012-0782—

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPr

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1650—webappsphp

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

CVE-2008-1680—webappsphp

PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenanc

23RISCO

abrir ↗

Referência✓ VexDay Proof

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

CVE-2006-2844—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'OVAS.exe' Overflow (SEH)

CVE-2008-1697—remotewindows

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows

60RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Visual InterDev 6.0 SP6 - '.sln' Local Buffer Overflow (PoC)

CVE-2008-1709—doswindows

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a St

28RISCO

abrir ↗

Referência✓ VexDay Proof

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

CVE-2008-1714—webappsphp

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

KnowledgeQuest 2.6 - SQL Injection

CVE-2008-1726—webappsphp

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Titan FTP Server 6.26 build 630 - Remote Denial of Service

CVE-2008-6082—doswindows

Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO

50RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS Module event 1.0 - Remote File Inclusion

CVE-2006-6800—webappsphp

PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Back-End CMS 0.7.2.2 - 'BE_config.php' Remote File Inclusion

CVE-2006-2682—webappsphp

PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Informium 0.12.0 - 'common-menu.php' Remote File Inclusion

CVE-2006-2818—webappsphp

PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-7672

CVE-2026-7672MEDIUM

youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7671

CVE-2026-7671MEDIUM

CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication

33RISCO

abrir ↗

Referência

CVE-2026-7669

CVE-2026-7669MEDIUM

sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

33RISCO

abrir ↗

Referência

CVE-2026-7669

CVE-2026-7669MEDIUM

sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

33RISCO

abrir ↗

Referência

CVE-2026-7668

CVE-2026-7668MEDIUM

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2026-7653

CVE-2026-7653MEDIUM

r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Prediction Football 1.x - 'matchid' SQL Injection

CVE-2008-1732—webappsphp

SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2019-14347

CVE-2019-14347—

Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an ad

23RISCO

abrir ↗

Referência

CVE-2026-56122

CVE-2026-56122HIGH

Winstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths

41RISCO

abrir ↗

Referência✓ VexDay Proof

LiveCart 1.1.1 - 'id' Blind SQL Injection

CVE-2008-1750—webappsphp

SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2026-56121

CVE-2026-56121CRITICAL

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

48RISCO

abrir ↗

Referência

CVE-2026-56111

CVE-2026-56111HIGH

Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

41RISCO

abrir ↗

Referência✓ VexDay Proof

Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection

CVE-2006-6806—webappsasp

SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.