Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2026-10293

CVE-2026-10293HIGH

UTT HiPER 1200GW formFireWall strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2013-2751

CVE-2013-2751—

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator

60RISCO

abrir ↗

Referência

CVE-2011-0519

CVE-2011-0519—

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows

23RISCO

abrir ↗

Referência

CVE-2018-8174

CVE-2018-8174HIGHsob ataqueransomware

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

93RISCO

abrir ↗

Referência

CVE-2026-40524

CVE-2026-40524HIGH

FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions()

41RISCO

abrir ↗

Referência

CVE-2026-8289

CVE-2026-8289MEDIUM

Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service

33RISCO

abrir ↗

Referência✓ VexDay Proof

Binn SBuilder - 'nid' Blind SQL Injection

CVE-2008-0253—webappsphp

SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

TutorialCMS 1.02 - 'Username' SQL Injection

CVE-2008-0254—webappsphp

SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is disa

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASP Photo Gallery 1.0 - Multiple SQL Injections

CVE-2008-0256—webappsasp

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2026-13561

CVE-2026-13561MEDIUM

Edimax EW-7478APC POST Request formiNICbasic os command injection

33RISCO

abrir ↗

Referência

CVE-2026-13554

CVE-2026-13554MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-13553

CVE-2026-13553MEDIUM

itsourcecode Online Hotel Management System controller.php add unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2011-0611

CVE-2011-0611HIGHsob ataque

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A

100RISCO

abrir ↗

Referência

CVE-2013-3214

CVE-2013-3214—

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RISCO

abrir ↗

Referência

CVE-2026-13549

CVE-2026-13549MEDIUM

CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization

33RISCO

abrir ↗

Referência

CVE-2026-13546

CVE-2026-13546MEDIUM

Feehi CMS REST API Endpoint articles missing authentication

33RISCO

abrir ↗

Referência

CVE-2011-0900

CVE-2011-0900—

Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150

23RISCO

abrir ↗

Referência

CVE-2011-0903

CVE-2011-0903—

Multiple directory traversal vulnerabilities in AR Web Content Manager (AWCM) 2.2 allow remote attackers to read arbitra

23RISCO

abrir ↗

Referência

CVE-2013-4211

CVE-2013-4211—

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, wh

60RISCO

abrir ↗

Referência

CVE-2026-6600

CVE-2026-6600MEDIUM

langflow-ai langflow Frontend React Component Rendering edit-message.tsx cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6599

CVE-2026-6599MEDIUM

langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection

33RISCO

abrir ↗

Referência

CVE-2026-6598

CVE-2026-6598MEDIUM

langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file

33RISCO

abrir ↗

Referência

CVE-2026-5633

CVE-2026-5633MEDIUM

assafelovic gpt-researcher ws Endpoint server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2018-25235

CVE-2018-25235MEDIUM

NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS

33RISCO

abrir ↗

Referência

CVE-2018-25234

CVE-2018-25234MEDIUM

SmartFTP Client 9.0.2615.0 Denial of Service via Host Field

33RISCO

abrir ↗

Referência

CVE-2018-25233

CVE-2018-25233MEDIUM

WebDrive 18.00.5057 Denial of Service via Secure WebDAV

33RISCO

abrir ↗

Referência

CVE-2018-25232

CVE-2018-25232MEDIUM

Softros LAN Messenger 9.2 Denial of Service via Log Files Location

33RISCO

abrir ↗

Referência

CVE-2018-25231

CVE-2018-25231MEDIUM

HeidiSQL 9.5.0.5196 Denial of Service via Preferences

33RISCO

abrir ↗

Referência

CVE-2018-25230

CVE-2018-25230MEDIUM

Free IP Switcher 3.1 Denial of Service via Computer Name

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.