Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2019-25691

CVE-2019-25691HIGH

Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2019-25689

CVE-2019-25689HIGH

HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

41RISCO

abrir ↗

Referência

CVE-2018-25258

CVE-2018-25258HIGH

RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2018-25257

CVE-2018-25257HIGH

Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

41RISCO

abrir ↗

Referência

CVE-2017-20239

CVE-2017-20239MEDIUM

MDwiki Cross-Site Scripting via Location Hash Parameter

33RISCO

abrir ↗

Referência

CVE-2026-6126

CVE-2026-6126MEDIUM

zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

33RISCO

abrir ↗

Referência✓ VexDay Proof

Chaussette 080706 - '_BASE' Remote File Inclusion

CVE-2006-4159—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute ar

28RISCO

abrir ↗

Referência

CVE-2010-4280

CVE-2010-4280—

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-7690

CVE-2017-7690—

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w

23RISCO

abrir ↗

Referência

CVE-2026-14440

CVE-2026-14440HIGH

Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

41RISCO

abrir ↗

Referência

CVE-2026-58451

CVE-2026-58451HIGH

Horde IMP < 7.0.1 Path Traversal via Compose.php img src

41RISCO

abrir ↗

Referência

CVE-2026-65708

CVE-2026-65708HIGH

sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

41RISCO

abrir ↗

Referência

CVE-2026-12688

CVE-2026-12688MEDIUM

ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery

33RISCO

abrir ↗

Referência

CVE-2026-16763

CVE-2026-16763MEDIUM

localstack serverless-localstack Configuration index.js os command injection

33RISCO

abrir ↗

Referência

CVE-2026-19699

CVE-2026-19699LOW

GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure

28RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - 'catid' SQL Injection

CVE-2008-6622—webappsphp

SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows

23RISCO

abrir ↗

Referência

CVE-2026-19697

CVE-2026-19697MEDIUM

GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload

33RISCO

abrir ↗

Referência

CVE-2026-19615

CVE-2026-19615MEDIUM

Admin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPC

33RISCO

abrir ↗

Referência

CVE-2026-13552

CVE-2026-13552MEDIUM

itsourcecode Online Hotel Management System controller.php edit sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13551

CVE-2026-13551MEDIUM

itsourcecode Baptism Information Management System editBaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13550

CVE-2026-13550MEDIUM

itsourcecode Baptism Information Management System delbaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-76591

CVE-2026-76591MEDIUM

TRENDnet TEW-755AP ssi email.cgi log_email_server command injection

33RISCO

abrir ↗

Referência

CVE-2026-18466

CVE-2026-18466MEDIUM

WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation

33RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass

CVE-2008-6624—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência

CVE-2010-4282

CVE-2010-4282—

Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute a

43RISCO

abrir ↗

Referência

CVE-2026-76004

CVE-2026-76004CRITICAL

UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-76003

CVE-2026-76003CRITICAL

UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-75986

CVE-2026-75986MEDIUM

code-projects Online Job Portal System Password Recovery ForPass.php sql injection

33RISCO

abrir ↗

Referência

CVE-2016-5063

CVE-2016-5063—

The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote atta

23RISCO

abrir ↗

Referência

CVE-2026-65916

CVE-2026-65916HIGH

CyberPanel Missing Authorization in cancelBackupCreation Handler

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.