Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

23.022 exploits

Referência✓ VexDay Proof

KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection

CVE-2008-1758—webappsphp

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download

CVE-2008-1770—remotewindows

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force

28RISCO

abrir ↗

Referência

CVE-2026-7384

CVE-2026-7384MEDIUM

ezequiroga mcp-bases research_server.py search_papers path traversal

33RISCO

abrir ↗

Referência

WordPress Plugin UserPro 4.9.32 - Cross-Site Scripting

CVE-2019-14470—webappsphp

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has X

60RISCO

abrir ↗

Referência

CVE-2026-9815

CVE-2026-9815MEDIUM

MagicForm <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE

33RISCO

abrir ↗

Referência

CVE-2026-55200

CVE-2026-55200CRITICAL

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

48RISCO

abrir ↗

Referência✓ VexDay Proof

Prozilla Hosting Index - 'id' SQL Injection

CVE-2008-6115—webappsphp

SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

Sabros.us 1.75 - 'thumbnails.php' Remote File Disclosure

CVE-2008-1799—webappsphp

Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência✓ VexDay Proof

rdesktop 1.5.0 - 'process_redirect_pdu()' BSS Overflow (PoC)

CVE-2008-1802—doslinux

Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitr

28RISCO

abrir ↗

Referência

CVE-2025-54236

CVE-2025-54236CRITICALsob ataque

Adobe Commerce | Improper Input Validation (CWE-20)

100RISCO

abrir ↗

Referência

CVE-2021-22502

CVE-2021-22502CRITICALsob ataque

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The

100RISCO

abrir ↗

Referência

CVE-2025-20281

CVE-2025-20281CRITICALsob ataque

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2012-1058

CVE-2012-1058—

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication

23RISCO

abrir ↗

Referência✓ VexDay Proof

BosClassifieds 3.0 - 'index.php' SQL Injection

CVE-2008-1838—webappsphp

SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2012-1058

CVE-2012-1058—

Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication

23RISCO

abrir ↗

Referência

CVE-2019-14696

CVE-2019-14696—

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.

43RISCO

abrir ↗

Referência✓ VexDay Proof

ForumApp 3.3 - Remote Database Disclosure

CVE-2008-6147—webappsasp

ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attac

23RISCO

abrir ↗

Referência

CVE-2020-25223

CVE-2020-25223CRITICALsob ataque

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511

100RISCO

abrir ↗

Referência✓ VexDay Proof

KsIRC 1.3.12 - 'PRIVMSG' Remote Buffer Overflow (PoC)

CVE-2006-6811—doslinux

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to a

28RISCO

abrir ↗

Referência✓ VexDay Proof

Butterfly ORGanizer 2.0.0 - Arbitrary Delete (Category/Account)

CVE-2008-7181—webappsphp

Butterfly Organizer 2.0.0 allows remote attackers to (1) delete arbitrary categories via a modified tablehere parameter

23RISCO

abrir ↗

Referência✓ VexDay Proof

EgyPlus 7ml 1.0.1 - Authentication Bypass

CVE-2009-2167—webappsphp

Multiple SQL injection vulnerabilities in cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier, when magic_quo

23RISCO

abrir ↗

Referência

CVE-2019-9194

CVE-2019-9194—

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

60RISCO

abrir ↗

Referência✓ VexDay Proof

osTicket 1.12 - Persistent Cross-Site Scripting via File Upload

CVE-2019-14748—webappsphp

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upl

23RISCO

abrir ↗

Referência

CVE-2023-33246

CVE-2023-33246CRITICALsob ataque

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RISCO

abrir ↗

Referência

CVE-2023-33246

CVE-2023-33246CRITICALsob ataque

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RISCO

abrir ↗

Referência★ 104

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

CVE-2023-33246CRITICALsob ataque

Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

100RISCO

abrir ↗

Referência

CVE-2019-14750

CVE-2019-14750—

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It w

43RISCO

abrir ↗

Referência

CVE-2026-10815

CVE-2026-10815MEDIUM

LakshayD02 Hostel-Management-System-PHP Admin Dashboard index.php authorization

33RISCO

abrir ↗

Referência

CVE-2026-10814

CVE-2026-10814LOW

milvus-io milvus Grantee ID Hash kv_catalog.go weak hash

28RISCO

abrir ↗

Referência

CVE-2026-10812

CVE-2026-10812LOW

zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.