Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2016-0049

CVE-2016-0049—

Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

28RISCO

abrir ↗

Referência

CVE-2026-19928

CVE-2026-19928MEDIUM

OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management

33RISCO

abrir ↗

Referência

CVE-2018-14335

CVE-2018-14335MEDIUM

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read

38RISCO

abrir ↗

Referência

CVE-2026-19927

CVE-2026-19927MEDIUM

OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-19926

CVE-2026-19926MEDIUM

Evergreen open-ils.fielder OpenSRF Service osrf-gateway-v1 sql injection

33RISCO

abrir ↗

Referência

CVE-2017-1000373

CVE-2017-1000373—

The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N

28RISCO

abrir ↗

Referência

CVE-2011-4713

CVE-2011-4713—

Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arb

23RISCO

abrir ↗

Referência

CVE-2017-10661

CVE-2017-10661—

Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia

28RISCO

abrir ↗

Referência

CVE-2018-8298

CVE-2018-8298HIGHsob ataque

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory,

93RISCO

abrir ↗

Referência

CVE-2022-20707

CVE-2022-20707CRITICAL

Cisco Small Business RV Series Routers Vulnerabilities

85RISCO

abrir ↗

Referência

CVE-2021-36711

CVE-2021-36711—

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

28RISCO

abrir ↗

Referência

CVE-2010-1885

CVE-2010-1885—

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server

60RISCO

abrir ↗

Referência✓ VexDay Proof

Dovecot IMAP 1.0.10 < 1.1rc2 - Remote Email Disclosure

CVE-2008-1218—remotemultiple

Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,

23RISCO

abrir ↗

Referência

CVE-2019-13235

CVE-2019-13235—

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

23RISCO

abrir ↗

Referência

CVE-2019-13272

CVE-2019-13272HIGHsob ataque

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

abrir ↗

Referência

CVE-2019-13272

CVE-2019-13272HIGHsob ataque

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

abrir ↗

Referência

CVE-2011-4808

CVE-2011-4808—

SQL injection vulnerability in the HM Community (com_hmcommunity) component before 1.01 for Joomla! allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Bloo 1.00 - Multiple SQL Injections

CVE-2008-1313—webappsphp

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

QuickTalk Forum 1.6 - Blind SQL Injection

CVE-2008-1316—webappsphp

SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers

23RISCO

abrir ↗

Referência✓ VexDay Proof

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection

CVE-2008-5775—webappsphp

SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

CadeNix - SQL Injection

CVE-2008-5777—webappsphp

SQL injection vulnerability in index.php in CadeNix allows remote attackers to execute arbitrary SQL commands via the ci

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyCalendar 4.0tr - Multiple Vulnerabilities

CVE-2008-1344—webappsphp

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbi

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyGallery 5.0tr - Multiple Vulnerabilities

CVE-2008-1347—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Fully Modded phpBB - 'kb.php' SQL Injection

CVE-2008-1350—webappsphp

SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2018-11409

CVE-2018-11409—

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json

60RISCO

abrir ↗

Referência✓ VexDay Proof

iGaming CMS 1.5 - Multiple SQL Injections

CVE-2008-5841—webappsphp

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2026-19923

CVE-2026-19923MEDIUM

code-projects Online Shopping System checkout_process.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-19922

CVE-2026-19922MEDIUM

code-projects Online Shopping System checkout.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-19921

CVE-2026-19921MEDIUM

code-projects Online Shopping System homeaction.php sql injection

33RISCO

abrir ↗

Referência

CVE-2022-27925

CVE-2022-27925HIGHsob ataqueransomware

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts file

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.