Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados

34.638CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.662 exploits

Referência

CVE-2018-25318

CVE-2018-25318CRITICAL

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25317

CVE-2018-25317CRITICAL

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25316

CVE-2018-25316CRITICAL

Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25315

CVE-2018-25315HIGH

Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name

41RISCO

abrir ↗

Referência

CVE-2018-25314

CVE-2018-25314HIGH

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2018-25313

CVE-2018-25313MEDIUM

SysGauge 4.5.18 Local Denial of Service via Proxy Configuration

33RISCO

abrir ↗

Referência

CVE-2018-25304

CVE-2018-25304HIGH

Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2026-14736

CVE-2026-14736MEDIUM

Ruijie RG-UAC user_auth_commit.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-14735

CVE-2026-14735MEDIUM

code-projects Smart Parking System parkings.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14734

CVE-2026-14734MEDIUM

SourceCodester Class and Exam Timetabling System edit_product.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14733

CVE-2026-14733MEDIUM

SourceCodester Class and Exam Timetabling System edit_coursea.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14732

CVE-2026-14732MEDIUM

SourceCodester Class and Exam Timetabling System edit_exam.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

abrir ↗

Referência✓ VexDay Proof

NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write

CVE-2007-3400—remotewindows

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3426—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpTrafficA 1.4.2 - 'pageid' SQL Injection

CVE-2007-3427—webappsphp

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

Pharmacy System 2.0 - 'index.php?ID' SQL Injection

CVE-2007-3433—webappsphp

SQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2026-66749

CVE-2026-66749HIGH

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

41RISCO

abrir ↗

Referência

CVE-2026-18038

CVE-2026-18038MEDIUM

nextlevelbuilder GoClaw jq Handler tools_invoke.go ExecTool.Execute information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-14926

CVE-2026-14926MEDIUM

FluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-14924

CVE-2026-14924HIGH

Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification

41RISCO

abrir ↗

Referência

CVE-2026-14870

CVE-2026-14870HIGH

Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id

41RISCO

abrir ↗

Referência

CVE-2026-14821

CVE-2026-14821LOW

Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion

28RISCO

abrir ↗

Referência✓ VexDay Proof

RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow

CVE-2007-3435—remotewindows

Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) Bar

50RISCO

abrir ↗

Referência

CVE-2026-14819

CVE-2026-14819LOW

Event Tickets < 5.28.4 - Editor+ Stored XSS via Ticket Move

28RISCO

abrir ↗

Referência✓ VexDay Proof

bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting

CVE-2007-3448—webappsphp

Cross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2026-66029

CVE-2026-66029MEDIUM

Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field

33RISCO

abrir ↗

Referência

CVE-2026-5659

CVE-2026-5659MEDIUM

pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

33RISCO

abrir ↗

Referência

CVE-2026-5650

CVE-2026-5650MEDIUM

code-projects Online Application System for Admission oas.sql sensitive information

33RISCO

abrir ↗

Referência

CVE-2026-5649

CVE-2026-5649MEDIUM

code-projects Online Application System for Admission Endpoint admsnform.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.