Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência✓ VexDay Proof

GrapAgenda 0.1 - 'page' Remote File Inclusion

CVE-2006-4610—webappsphp

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, a

23RISCO

abrir ↗

Referência

CVE-2016-8811

CVE-2016-8811—

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3

23RISCO

abrir ↗

Referência

CVE-2016-8855

CVE-2016-8855—

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience

23RISCO

abrir ↗

Referência

CVE-2016-8855

CVE-2016-8855—

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience

23RISCO

abrir ↗

Referência

CVE-2016-8869

CVE-2016-8869—

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before

60RISCO

abrir ↗

Referência

CVE-2026-16244

CVE-2026-16244MEDIUM

itsourcecode Hospital Management System prescriptionorderreport.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-23696

CVE-2026-23696CRITICAL

Windmill < 1.603.3 File Ownership Handling SQLi RCE

68RISCO

abrir ↗

Referência

CVE-2026-23696

CVE-2026-23696CRITICAL

Windmill < 1.603.3 File Ownership Handling SQLi RCE

68RISCO

abrir ↗

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-33866

CVE-2026-33866MEDIUM

Authorization Bypass in MLflow AJAX Endpoint

33RISCO

abrir ↗

Referência

CVE-2026-33865

CVE-2026-33865MEDIUM

Stored XSS via unsafe YAML parsing in MLflow

33RISCO

abrir ↗

Referência

CVE-2026-22679

CVE-2026-22679CRITICAL

Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

53RISCO

abrir ↗

Referência

CVE-2018-25300

CVE-2018-25300HIGH

XATABoost CMS 1.0.0 SQL Injection via news.php

41RISCO

abrir ↗

Referência

CVE-2026-7392

CVE-2026-7392MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7391

CVE-2026-7391MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7390

CVE-2026-7390MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7389

CVE-2026-7389MEDIUM

EyouCMS common.php GetSortData sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7388

CVE-2026-7388MEDIUM

EyouCMS Template File FilemanagerLogic.php editFile code injection

33RISCO

abrir ↗

Referência

CVE-2026-66749

CVE-2026-66749HIGH

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

41RISCO

abrir ↗

Referência

CVE-2016-9079

CVE-2016-9079HIGHsob ataque

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis

100RISCO

abrir ↗

Referência

CVE-2016-9079

CVE-2016-9079HIGHsob ataque

A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis

100RISCO

abrir ↗

Referência

CVE-2026-66029

CVE-2026-66029MEDIUM

Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field

33RISCO

abrir ↗

Referência

CVE-2026-5659

CVE-2026-5659MEDIUM

pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

33RISCO

abrir ↗

Referência

CVE-2026-5650

CVE-2026-5650MEDIUM

code-projects Online Application System for Admission oas.sql sensitive information

33RISCO

abrir ↗

Referência

CVE-2026-5649

CVE-2026-5649MEDIUM

code-projects Online Application System for Admission Endpoint admsnform.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5648

CVE-2026-5648MEDIUM

code-projects Simple Laundry System Parameter userfinishregister.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5647

CVE-2026-5647MEDIUM

code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5646

CVE-2026-5646MEDIUM

code-projects Easy Blog Site login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5645

CVE-2026-5645MEDIUM

projectworlds Car Rental System Parameter pay.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.