Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2026-7506

CVE-2026-7506MEDIUM

SourceCodester Hotel Management System check sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7505

CVE-2026-7505MEDIUM

nextlevelbuilder GoClaw/GoClaw Lite RPC improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7503

CVE-2026-7503HIGH

code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7502

CVE-2026-7502MEDIUM

LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

33RISCO

abrir ↗

Referência

CVE-2026-7501

CVE-2026-7501MEDIUM

LinkStackOrg LinkStack UserController.php editPage cross site scripting

33RISCO

abrir ↗

Referência

CVE-2022-50992

CVE-2022-50992HIGH

Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet

41RISCO

abrir ↗

Referência

CVE-2022-50992

CVE-2022-50992HIGH

Weaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet

41RISCO

abrir ↗

Referência

CVE-2022-50993

CVE-2022-50993CRITICAL

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

48RISCO

abrir ↗

Referência

CVE-2022-50993

CVE-2022-50993CRITICAL

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

48RISCO

abrir ↗

Referência

CVE-2025-71284

CVE-2025-71284CRITICAL

Synway SMG Gateway Management Software OS Command Injection via radius_address

48RISCO

abrir ↗

Referência

CVE-2010-4280

CVE-2010-4280—

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-7690

CVE-2017-7690—

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w

23RISCO

abrir ↗

Referência

CVE-2026-14440

CVE-2026-14440HIGH

Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

41RISCO

abrir ↗

Referência

CVE-2026-58451

CVE-2026-58451HIGH

Horde IMP < 7.0.1 Path Traversal via Compose.php img src

41RISCO

abrir ↗

Referência

CVE-2017-7938

CVE-2017-7938MEDIUM

Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cau

33RISCO

abrir ↗

Referência

CVE-2017-7953

CVE-2017-7953—

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

23RISCO

abrir ↗

Referência

CVE-2017-7981

CVE-2017-7981—

Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project W

28RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Post Card 1.02 - 'catid' SQL Injection

CVE-2008-6622—webappsphp

SQL injection vulnerability in choosecard.php in WEBBDOMAIN Post Card (aka Web Postcards) 1.02, 1.01, and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBBDOMAIN Petition 1.02/2.0/3.0 - Authentication Bypass

CVE-2008-6624—webappsphp

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

MercuryBoard 1.1.5 - 'login.php' Blind SQL Injection

CVE-2008-6632—webappsphp

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - 'idresa' SQL Injection

CVE-2008-6633—webappsphp

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idre

23RISCO

abrir ↗

Referência✓ VexDay Proof

RoomPHPlanning 1.5 - Multiple SQL Injections

CVE-2008-6634—webappsphp

SQL injection vulnerability in RoomPHPlanning 1.5 allows remote attackers to execute arbitrary SQL commands via the idro

23RISCO

abrir ↗

Referência

CVE-2026-13552

CVE-2026-13552MEDIUM

itsourcecode Online Hotel Management System controller.php edit sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13551

CVE-2026-13551MEDIUM

itsourcecode Baptism Information Management System editBaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13550

CVE-2026-13550MEDIUM

itsourcecode Baptism Information Management System delbaptism.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13548

CVE-2026-13548MEDIUM

itsourcecode Hospital Management System doctortimings.php sql injection

33RISCO

abrir ↗

Referência

CVE-2010-4347

CVE-2010-4347—

The ACPI subsystem in the Linux kernel before 2.6.36.2 uses 0222 permissions for the debugfs custom_method file, which a

23RISCO

abrir ↗

Referência

CVE-2010-4356

CVE-2010-4356—

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência

CVE-2010-4356

CVE-2010-4356—

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction - 'profile.php' SQL Injection (1)

CVE-2008-6663—webappsphp

SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attacker

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.