Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2011-5165

CVE-2011-5165—

Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem

50RISCO

abrir ↗

Referência

CVE-2018-25326

CVE-2018-25326HIGH

Google Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.php

41RISCO

abrir ↗

Referência

CVE-2018-25325

CVE-2018-25325HIGH

Woocommerce CSV Importer 3.3.6 Path Traversal File Deletion

41RISCO

abrir ↗

Referência

CVE-2018-25322

CVE-2018-25322HIGH

Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2018-25321

CVE-2018-25321MEDIUM

TP-Link TL-WR720N CSRF via Administrative Interfaces (firmware V1_130719)

33RISCO

abrir ↗

Referência

CVE-2018-25320

CVE-2018-25320CRITICAL

ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution

48RISCO

abrir ↗

Referência

CVE-2018-25319

CVE-2018-25319HIGH

Redaxo CMS Addon MyEvents 2.2.1 SQL Injection via event_add.php

41RISCO

abrir ↗

Referência

CVE-2026-8753

CVE-2026-8753MEDIUM

kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection

33RISCO

abrir ↗

Referência

CVE-2026-8752

CVE-2026-8752MEDIUM

h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control

33RISCO

abrir ↗

Referência

CVE-2026-8751

CVE-2026-8751MEDIUM

h2oai h2o-3 JAR Model.java importBinaryModel deserialization

33RISCO

abrir ↗

Referência

CVE-2026-8750

CVE-2026-8750MEDIUM

h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-8747

CVE-2026-8747MEDIUM

Z-BlogPHP Commend Approval c_system_event.php CheckComment improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-8746

CVE-2026-8746MEDIUM

Open5GS NRF nghttp2-server.c discover_handler use after free

33RISCO

abrir ↗

Referência

CVE-2026-8745

CVE-2026-8745MEDIUM

Open5GS AUSF nausf-handler.c ogs_timer_add denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8744

CVE-2026-8744MEDIUM

Open5GS NRF context.c ogs_sbi_nf_service_add denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8743

CVE-2026-8743MEDIUM

Open5GS AMF/MME context.c ran_ue_find_by_amf_ue_ngap_id improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-8741

CVE-2026-8741LOW

EMQX QoS 2 PUBLISH Packet emqx_persistent_session_ds.erl race condition

28RISCO

abrir ↗

Referência

CVE-2026-8740

CVE-2026-8740MEDIUM

Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine

33RISCO

abrir ↗

Referência

CVE-2026-8739

CVE-2026-8739MEDIUM

Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

33RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

CVE-2009-1259—webappsphp

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência

CVE-2011-5186

CVE-2011-5186—

Cross-site scripting (XSS) vulnerability in jbshop.php in the jbShop plugin for e107 7 allows remote attackers to inject

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_bookJoomlas 0.1 - SQL Injection

CVE-2009-1263—webappsphp

SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allow

23RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

CVE-2009-1277—webappsphp

SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2011-5196

CVE-2011-5196—

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Sys

23RISCO

abrir ↗

Referência

CVE-2020-14871

CVE-2020-14871CRITICALsob ataque

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported ve

100RISCO

abrir ↗

Referência

CVE-2020-14944

CVE-2020-14944—

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can all

23RISCO

abrir ↗

Referência

CVE-2020-14946

CVE-2020-14946—

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and e

23RISCO

abrir ↗

Referência

CVE-2015-1725

CVE-2015-1725—

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Referência

CVE-2015-2051

CVE-2015-2051HIGHsob ataque

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute ar

100RISCO

abrir ↗

Referência

CVE-2015-2102

CVE-2015-2102—

SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execut

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.