Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.496exploits catalogados

34.964CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2026-7272

CVE-2026-7272MEDIUM

WilliamCloudQi matlab-mcp-server MCP index.ts execute_matlab_code path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7271

CVE-2026-7271MEDIUM

DV0x creative-ad-agent creative-ad-agent-server sdk-server.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7269

CVE-2026-7269MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7268

CVE-2026-7268MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7267

CVE-2026-7267MEDIUM

SourceCodester Pizzafy Ecommerce System view_prod.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7266

CVE-2026-7266MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7265

CVE-2026-7265MEDIUM

SourceCodester Pizzafy Ecommerce System index.php category sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7264

CVE-2026-7264MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7248

CVE-2026-7248CRITICAL

D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflow

48RISCO

abrir ↗

Referência

CVE-2026-7247

CVE-2026-7247HIGH

D-Link DI-8100 File Extension file_exten.asp file_exten_asp buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7244

CVE-2026-7244CRITICAL

Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-7243

CVE-2026-7243CRITICAL

Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2025-10539

CVE-2025-10539MEDIUM

Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App

33RISCO

abrir ↗

Referência

CVE-2026-7241

CVE-2026-7241CRITICAL

Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-7240

CVE-2026-7240CRITICAL

Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-5306

CVE-2026-5306MEDIUM

Check & Log Email < 2.0.13 - Unauthenticated Stored XSS

33RISCO

abrir ↗

Referência

CVE-2026-7227

CVE-2026-7227MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php login sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Snitz Forums 2000 3.1 SR4 - 'pop_profile.asp' SQL Injection

CVE-2007-1023—webappsasp

SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke Module Emporium 2.3.0 - SQL Injection

CVE-2007-1034—webappsphp

SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke al

23RISCO

abrir ↗

Referência✓ VexDay Proof

Nortel SSL VPN Linux Client 6.0.3 - Local Privilege Escalation

CVE-2007-1057—locallinux

The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 10

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities

CVE-2007-1075—doswindows

TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large

23RISCO

abrir ↗

Referência✓ VexDay Proof

TurboFTP Server 5.30 Build 572 - 'newline/LIST' Multiple Remote Denial of Service Vulnerabilities

CVE-2007-1080—doswindows

Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion

CVE-2007-1104—webappsphp

PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Extreme phpBB 3.0.1 - 'functions.php' Remote File Inclusion

CVE-2007-1105—webappsphp

PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attack

23RISCO

abrir ↗

Referência

CVE-2007-1107

CVE-2007-1107—

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

Coppermine Photo Gallery 1.3.x - Blind SQL Injection

CVE-2007-1107—webappsphp

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.02 - 'topic' SQL Injection

CVE-2007-1163—webappsphp

SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

Plan 9 Kernel - 'devenv.c OTRUNC/pwrite' Local Privilege Escalation

CVE-2007-1189—localplan9

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite

23RISCO

abrir ↗

Referência✓ VexDay Proof

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

CVE-2007-1219—webappsphp

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

Angel Lms 7.1 - 'default.asp?id' SQL Injection

CVE-2007-1250—webappsasp

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.