Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2017-20246

CVE-2017-20246HIGH

KittyCatfish 2.2 Plugin for WordPress SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-20245

CVE-2017-20245HIGH

Wow Viral Signups 2.1 WordPress Plugin SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-20244

CVE-2017-20244HIGH

Wow Forms WordPress Plugin 2.1 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2017-20243

CVE-2017-20243HIGH

WordPress Car Park Booking Plugin SQL Injection via space_id

41RISCO

abrir ↗

Referência

CVE-2016-20065

CVE-2016-20065HIGH

Product Catalog 8 1.2 Plugin WordPress SQL Injection

41RISCO

abrir ↗

Referência

CVE-2026-49494

CVE-2026-49494HIGH

Xcitium Client Security / Comodo Internet Security Remote Denial of Service

41RISCO

abrir ↗

Referência

CVE-2026-11459

CVE-2026-11459MEDIUM

SecureAge CatchPulse IOCTL saappctl.sys information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-11459

CVE-2026-11459MEDIUM

SecureAge CatchPulse IOCTL saappctl.sys information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-11458

CVE-2026-11458MEDIUM

erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-11457

CVE-2026-11457MEDIUM

erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection

33RISCO

abrir ↗

Referência

CVE-2026-11411

CVE-2026-11411MEDIUM

iAI Lab PDF AI App chatpdf.pro getExternalCacheDir path traversal

33RISCO

abrir ↗

Referência✓ VexDay Proof

FastStone Image Viewer 3.6 - '.BMP' Image Crash

CVE-2008-5870—doswindows

FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malform

23RISCO

abrir ↗

Referência

CVE-2026-15525

CVE-2026-15525MEDIUM

kLOsk adloop write.py _validate_urls server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-15524

CVE-2026-15524MEDIUM

alioshr memory-bank-mcp list-project-files-validation-factory.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-15523

CVE-2026-15523MEDIUM

CodeAstro Simple Online Leave Management System dashboard.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15522

CVE-2026-15522MEDIUM

tugcantopaloglu godot-mcp run_project index.js validatePath path traversal

33RISCO

abrir ↗

Referência

CVE-2026-15521

CVE-2026-15521MEDIUM

makafeli n8n-workflow-builder update_node_from_file server.cjs path traversal

33RISCO

abrir ↗

Referência

CVE-2026-15520

CVE-2026-15520MEDIUM

GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2011-4062

CVE-2011-4062—

Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component 5starhotels - SQL Injection

CVE-2008-5874—webappsphp

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_allhotels - Blind SQL Injection

CVE-2008-5874—webappsphp

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack

23RISCO

abrir ↗

Referência

CVE-2026-15478

CVE-2026-15478MEDIUM

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15474

CVE-2026-15474MEDIUM

Eleveo Call Recording Software audio.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15473

CVE-2026-15473MEDIUM

Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15472

CVE-2026-15472MEDIUM

Eleveo Call Recording Software composeEmailAction.do improper authorization

33RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_lowcosthotels - Blind SQL Injection

CVE-2008-5875—webappsphp

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joo

23RISCO

abrir ↗

Referência

CVE-2026-15471

CVE-2026-15471MEDIUM

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15470

CVE-2026-15470MEDIUM

Eleveo Call Recording Software group.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15311

CVE-2026-15311MEDIUM

NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting

33RISCO

abrir ↗

Referência

CVE-2008-5923

CVE-2008-5923—

SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.