Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência

CVE-2022-47076

CVE-2022-47076HIGH

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Display

41RISCO

abrir ↗

Referência

CVE-2022-47636

CVE-2022-47636—

A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open

23RISCO

abrir ↗

Referência

CVE-2022-47874

CVE-2022-47874MEDIUM

Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of dat

38RISCO

abrir ↗

Referência

CVE-2022-47875

CVE-2022-47875HIGH

A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to ex

46RISCO

abrir ↗

Referência

CVE-2022-47876

CVE-2022-47876CRITICAL

The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code v

48RISCO

abrir ↗

Referência

CVE-2022-47986

CVE-2022-47986CRITICALsob ataqueransomware

IBM Aspera Faspex code execution

100RISCO

abrir ↗

Referência

CVE-2022-48110

CVE-2022-48110MEDIUM

CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CK

33RISCO

abrir ↗

Referência

CVE-2026-32834

CVE-2026-32834HIGH

Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning

41RISCO

abrir ↗

Referência

CVE-2011-5005

CVE-2011-5005—

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code b

23RISCO

abrir ↗

Referência

CVE-2026-7744

CVE-2026-7744MEDIUM

CodeAstro Online Classroom addnewstudent sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9702

CVE-2026-9702HIGH

InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking

41RISCO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISCO

abrir ↗

Referência

CVE-2023-0315

CVE-2023-0315HIGH

Command Injection in froxlor/froxlor

78RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection

CVE-2008-5864—webappsphp

SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System

23RISCO

abrir ↗

Referência

CVE-2010-1653

CVE-2010-1653—

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a

43RISCO

abrir ↗

Referência

CVE-2023-0493

CVE-2023-0493MEDIUM

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

33RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_hbssearch 1.0 - Blind SQL Injection

CVE-2008-5865—webappsphp

SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 f

23RISCO

abrir ↗

Referência

CVE-2023-0527

CVE-2023-0527LOW

PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting

43RISCO

abrir ↗

Referência

CVE-2022-43769

CVE-2022-43769HIGHsob ataque

Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

100RISCO

abrir ↗

Referência✓ VexDay Proof

Active Test 2.1 - Authentication Bypass

CVE-2008-5959—webappsasp

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2026-18216

CVE-2026-18216MEDIUM

Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login

33RISCO

abrir ↗

Referência

CVE-2026-16611

CVE-2026-16611HIGH

Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure

41RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity GTD 0.4.5 - Local File Inclusion / Remote Code Execution

CVE-2008-5962—webappsphp

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows

23RISCO

abrir ↗

Referência

CVE-2026-16541

CVE-2026-16541MEDIUM

Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints

33RISCO

abrir ↗

Referência

EasyNas 1.1.0 - OS Command Injection

CVE-2023-0830MEDIUMremotehardware

EasyNAS backup.pl system os command injection

38RISCO

abrir ↗

Referência

CVE-2019-18818

CVE-2019-18818—

strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/s

60RISCO

abrir ↗

Referência✓ VexDay Proof

LokiCMS 0.3.4 - 'index.php' Arbitrary Check File

CVE-2008-5965—webappsphp

Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows r

23RISCO

abrir ↗

Referência

CVE-2023-0902

CVE-2023-0902LOW

SourceCodester Simple Food Ordering System process_order.php cross site scripting

28RISCO

abrir ↗

Referência

CVE-2025-61884

CVE-2025-61884HIGHsob ataqueransomware

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions

100RISCO

abrir ↗

Referência

CVE-2026-16007

CVE-2026-16007HIGH

Authenticated SQL Injection in AppFlowy

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.