Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-10293

CVE-2026-10293HIGH

UTT HiPER 1200GW formFireWall strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-19916

CVE-2026-19916MEDIUM

code-projects Online Food Order System edit_food_items.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2011-0517

CVE-2011-0517—

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows

50RISCO

abrir ↗

Referência

CVE-2013-2586

CVE-2013-2586—

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp

23RISCO

abrir ↗

Referência

CVE-2018-7756

CVE-2018-7756—

RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP

35RISCO

abrir ↗

Referência

CVE-2026-58450

CVE-2026-58450MEDIUM

Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter

33RISCO

abrir ↗

Referência

CVE-2014-5216

CVE-2014-5216—

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta

23RISCO

abrir ↗

Referência

CVE-2014-5246

CVE-2014-5246—

The Shenzhen Tenda Technology Tenda A5s router with firmware 3.02.05_CN allows remote attackers to bypass authentication

28RISCO

abrir ↗

Referência

CVE-2014-5258

CVE-2014-5258—

Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated

43RISCO

abrir ↗

Referência

CVE-2026-19898

CVE-2026-19898MEDIUM

VictoriaMetrics VMAuth Authentication Endpoint main.go requestHandler excessive authentication

33RISCO

abrir ↗

Referência

CVE-2017-0148

CVE-2017-0148HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

Referência

CVE-2026-8289

CVE-2026-8289MEDIUM

Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service

33RISCO

abrir ↗

Referência

CVE-2026-19838

CVE-2026-19838MEDIUM

Webkul Bagisto Backend Reporting Endpoint sales authorization

33RISCO

abrir ↗

Referência

CVE-2011-0611

CVE-2011-0611HIGHsob ataque

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A

100RISCO

abrir ↗

Referência

CVE-2013-3214

CVE-2013-3214—

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RISCO

abrir ↗

Referência

CVE-2014-5347

CVE-2014-5347—

Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin before 2.76 for WordPress

23RISCO

abrir ↗

Referência

CVE-2026-19825

CVE-2026-19825MEDIUM

SourceCodester Simple Client Management System Master.php save_service sql injection

33RISCO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHsob ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISCO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHsob ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISCO

abrir ↗

Referência

CVE-2017-0199

CVE-2017-0199HIGHsob ataqueransomware

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window

100RISCO

abrir ↗

Referência

CVE-2026-59109

CVE-2026-59109HIGH

Zalktis: SQL injection via partner-controlled fields in imported e-invoices

41RISCO

abrir ↗

Referência

CVE-2023-54347

CVE-2023-54347HIGH

OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass

41RISCO

abrir ↗

Referência

CVE-2013-3535

CVE-2013-3535—

Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2011-0652

CVE-2011-0652—

lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 and 2.07 allows local users to cause a denial of service (cras

23RISCO

abrir ↗

Referência

CVE-2013-3629

CVE-2013-3629—

ISPConfig 3.0.5.2 has Arbitrary PHP Code Execution

50RISCO

abrir ↗

Referência✓ VexDay Proof

LulieBlog 1.02 - SQL Injection

CVE-2008-0446—webappsphp

SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2026-13613

CVE-2026-13613HIGH

KiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST Endpoint

41RISCO

abrir ↗

Referência

CVE-2014-5465

CVE-2014-5465—

Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress

28RISCO

abrir ↗

Referência

CVE-2026-5832

CVE-2026-5832MEDIUM

atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5830

CVE-2026-5830HIGH

Tenda AC15 SysToolChangePwd websGetVar stack-based overflow

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.