Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência

CVE-2026-14641

CVE-2026-14641MEDIUM

SourceCodester Class and Exam Timetabling System edit_course.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14640

CVE-2026-14640MEDIUM

CodeAstro Apartment Visitor Management System Login index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14639

CVE-2026-14639MEDIUM

CodeAstro Ecommerce Website my_account.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14633

CVE-2026-14633MEDIUM

kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scripting

33RISCO

abrir ↗

Referência

CVE-2012-5900

CVE-2012-5900—

Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)

CVE-2006-0476—remotewindows

Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with

60RISCO

abrir ↗

Referência

CVE-2018-5989

CVE-2018-5989—

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber actio

23RISCO

abrir ↗

Referência

CVE-2018-5990

CVE-2018-5990—

SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.

23RISCO

abrir ↗

Referência

CVE-2018-5991

CVE-2018-5991—

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats re

23RISCO

abrir ↗

Referência

CVE-2012-6493

CVE-2012-6493—

Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-6516

CVE-2012-6516—

SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via th

23RISCO

abrir ↗

Referência

CVE-2026-6537

CVE-2026-6537MEDIUM

Stack-based Buffer Overflow in Wireshark

33RISCO

abrir ↗

Referência

CVE-2026-6536

CVE-2026-6536MEDIUM

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

33RISCO

abrir ↗

Referência

CVE-2026-7468

CVE-2026-7468MEDIUM

1024-lab smart-admin Demo Site index.html access control

33RISCO

abrir ↗

Referência

CVE-2018-5992

CVE-2018-5992—

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff r

23RISCO

abrir ↗

Referência

CVE-2018-6004

CVE-2018-6004—

SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.

23RISCO

abrir ↗

Referência

CVE-2018-6084

CVE-2018-6084—

Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local

23RISCO

abrir ↗

Referência

CVE-2018-6222

CVE-2018-6222—

Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log fi

23RISCO

abrir ↗

Referência

CVE-2018-6227

CVE-2018-6227—

A stored cross-site scripting (XSS) vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to

23RISCO

abrir ↗

Referência

Joomla! Component JEXTN Classified 1.0.0 - 'sid' SQL Injection

CVE-2018-6575—webappsphp

SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request.

23RISCO

abrir ↗

Referência

Event Manager 1.0 - SQL Injection

CVE-2018-6576—webappsphp

SQL Injection exists in Event Manager 1.0 via the event.php id parameter or the page.php slug parameter.

23RISCO

abrir ↗

Referência

CVE-2026-6617

CVE-2026-6617MEDIUM

langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-6615

CVE-2026-6615MEDIUM

TransformerOptimus SuperAGI Multipart Upload resources.py upload path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6644

CVE-2026-6644CRITICAL

A command injection vulnerability was found in the PPTP VPN Clients on the ADM

48RISCO

abrir ↗

Referência

CVE-2026-6614

CVE-2026-6614MEDIUM

TransformerOptimus SuperAGI project.py get_projects_organisation authorization

33RISCO

abrir ↗

Referência

CVE-2026-6613

CVE-2026-6613MEDIUM

TransformerOptimus SuperAGI agent.py get_schedule_data authorization

33RISCO

abrir ↗

Referência

CVE-2026-6612

CVE-2026-6612MEDIUM

TransformerOptimus SuperAGI Agent Execution Endpoint agent_execution.py update_agent_execution authorization

33RISCO

abrir ↗

Referência

CVE-2026-6611

CVE-2026-6611LOW

liangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key

28RISCO

abrir ↗

Referência

CVE-2024-7083

CVE-2024-7083LOW

Email Encoder < 2.3.4 - Admin+ Stored XSS

28RISCO

abrir ↗

Referência

CVE-2026-6610

CVE-2026-6610MEDIUM

liangliangyy DjangoBlog Setting settings.py hard-coded credentials

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.