Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-18582

CVE-2026-18582MEDIUM

mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap

33RISCO

abrir ↗

Referência

CVE-2010-3601

CVE-2010-3601—

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-3602

CVE-2010-3602—

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-3602

CVE-2010-3602—

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebBiscuits Modules Controller 1.1 - Remote File Inclusion / Remote File Disclosure

CVE-2008-6138—webappsphp

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote

23RISCO

abrir ↗

Referência

CVE-2013-5977

CVE-2013-5977—

Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordP

23RISCO

abrir ↗

Referência

CVE-2013-6117

CVE-2013-6117—

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive informatio

50RISCO

abrir ↗

Referência

CVE-2017-5594

CVE-2017-5594—

An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the reg

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component JD-Wiki 1.0.2 - Remote File Inclusion

CVE-2006-4074—webappsphp

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and ear

23RISCO

abrir ↗

Referência

CVE-2016-4010

CVE-2016-4010—

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary

60RISCO

abrir ↗

Referência

CVE-2016-4010

CVE-2016-4010—

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary

60RISCO

abrir ↗

Referência

CVE-2016-4108

CVE-2016-4108—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2026-14839

CVE-2026-14839HIGH

Mapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content Disclosure

41RISCO

abrir ↗

Referência

CVE-2026-14823

CVE-2026-14823LOW

Event Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOR

28RISCO

abrir ↗

Referência

CVE-2026-14822

CVE-2026-14822MEDIUM

Event Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status Manipulation

33RISCO

abrir ↗

Referência

CVE-2026-14561

CVE-2026-14561MEDIUM

Authora - Easy Login with Mobile Number < 1.7.7 - Unauthenticated Account Takeover via OTP Disclosure

33RISCO

abrir ↗

Referência

CVE-2010-3602

CVE-2010-3602—

Cross-site scripting (XSS) vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-3603

CVE-2010-3603—

Cross-site request forgery (CSRF) vulnerability in the file manager service (Services/FileService.ashx) in mojoPortal 2.

23RISCO

abrir ↗

Referência

CVE-2026-8215

CVE-2026-8215MEDIUM

Industrial Application Software IAS Canias ERP RMI iasRequestFileEvent path traversal

33RISCO

abrir ↗

Referência

CVE-2010-3608

CVE-2010-3608—

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência

CVE-2010-3608

CVE-2010-3608—

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the (1

23RISCO

abrir ↗

Referência

CVE-2026-18685

CVE-2026-18685CRITICAL

GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

48RISCO

abrir ↗

Referência

CVE-2026-67610

CVE-2026-67610HIGH

OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access

41RISCO

abrir ↗

Referência✓ VexDay Proof

SuperNET Shop 1.0 - SQL Injection

CVE-2008-6204—webappsasp

Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-18599

CVE-2026-18599HIGH

GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

41RISCO

abrir ↗

Referência

CVE-2026-18598

CVE-2026-18598HIGH

GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

41RISCO

abrir ↗

Referência

CVE-2026-18593

CVE-2026-18593MEDIUM

vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox

33RISCO

abrir ↗

Referência

CVE-2016-4137

CVE-2016-4137—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência

CVE-2026-8210

CVE-2026-8210MEDIUM

aandrew-me tgpt Update helper.go helper.Update command injection

33RISCO

abrir ↗

Referência

CVE-2026-8196

CVE-2026-8196MEDIUM

JeecgBoot mLogin Endpoint LoginController.java authorization

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.