Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2026-20253

CVE-2026-20253CRITICALsob ataque

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

100RISCO

abrir ↗

Referência

CVE-2026-76584

CVE-2026-76584CRITICAL

TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-76583

CVE-2026-76583MEDIUM

TRENDnet TV-IP751WIC alphapd set_time.cgi command injection

33RISCO

abrir ↗

Referência

CVE-2026-19416

CVE-2026-19416MEDIUM

KiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOR

33RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion

CVE-2006-2521—webappsphp

PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

TriO 2.1 - 'browse.php' SQL Injection

CVE-2008-3418—webappsphp

SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2026-19055

CVE-2026-19055HIGH

ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters

41RISCO

abrir ↗

Referência

CVE-2026-18937

CVE-2026-18937CRITICAL

Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection

48RISCO

abrir ↗

Referência✓ VexDay Proof

txtCMS 0.3 - 'index.php' Local File Inclusion

CVE-2008-5217—webappsphp

Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is d

23RISCO

abrir ↗

Referência

CVE-2013-4977

CVE-2013-4977—

Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), a

28RISCO

abrir ↗

Referência

CVE-2017-6008

CVE-2017-6008—

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in

23RISCO

abrir ↗

Referência

CVE-2010-0953

CVE-2010-0953—

Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (

23RISCO

abrir ↗

Referência

CVE-2026-16950

CVE-2026-16950HIGH

Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products

41RISCO

abrir ↗

Referência

CVE-2012-4259

CVE-2012-4259—

Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtua

23RISCO

abrir ↗

Referência

CVE-2015-2866

CVE-2015-2866—

SQL injection vulnerability on the Grandstream GXV3611_HD camera with firmware before 1.0.3.9 beta allows remote attacke

23RISCO

abrir ↗

Referência✓ VexDay Proof

EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion

CVE-2008-1649—webappsphp

Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2022-4978

CVE-2022-4978CRITICAL

Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE

63RISCO

abrir ↗

Referência

CVE-2026-16617

CVE-2026-16617HIGH

Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description

41RISCO

abrir ↗

Referência

CVE-2026-16616

CVE-2026-16616HIGH

Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

41RISCO

abrir ↗

Referência

CVE-2016-4625

CVE-2016-4625—

Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspeci

23RISCO

abrir ↗

Referência

CVE-2016-4625

CVE-2016-4625—

Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspeci

23RISCO

abrir ↗

Referência

CVE-2013-5791

CVE-2013-5791—

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allo

23RISCO

abrir ↗

Referência

CVE-2018-1188

CVE-2018-1188—

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is af

23RISCO

abrir ↗

Referência

CVE-2018-1201

CVE-2018-1201—

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers

23RISCO

abrir ↗

Referência

CVE-2012-4926

CVE-2012-4926—

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activ

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyForum 1.3 - 'padmin' Local File Inclusion

CVE-2008-4780—webappsphp

Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote at

23RISCO

abrir ↗

Referência

CVE-2008-3682

CVE-2008-3682—

SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-2124

CVE-2010-2124—

SQL injection vulnerability in firma.php in Bartels Schone ConPresso 4.0.7 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

OpenElec 3.01 - 'obj' Local File Inclusion

CVE-2008-6025—webappsphp

Directory traversal vulnerability in scr/form.php in openElec 3.01 and earlier allows remote attackers to include and ex

23RISCO

abrir ↗

Referência

CVE-2015-6655

CVE-2015-6655—

Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.