Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2010-0672

CVE-2010-0672—

SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-1723

CVE-2010-1723—

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! all

38RISCO

abrir ↗

Referência

CVE-2026-63730

CVE-2026-63730MEDIUM

HyperDX < 2.31.0 SSRF via Webhook Test Endpoint

33RISCO

abrir ↗

Referência

CVE-2026-12724

CVE-2026-12724MEDIUM

Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password

33RISCO

abrir ↗

Referência

CVE-2022-30190

CVE-2022-30190HIGHsob ataqueransomware

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

100RISCO

abrir ↗

Referência

CVE-2012-2614

CVE-2012-2614—

Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d

23RISCO

abrir ↗

Referência

CVE-2017-8680

CVE-2017-8680—

The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server

23RISCO

abrir ↗

Referência

CVE-2026-16219

CVE-2026-16219MEDIUM

Croogo CMS Admin File Manager FileManager.php isEditable path traversal

33RISCO

abrir ↗

Referência

CVE-2025-5640

CVE-2025-5640MEDIUM

PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow

33RISCO

abrir ↗

Referência

CVE-2010-0690

CVE-2010-0690—

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2012-2740

CVE-2012-2740—

SQL injection vulnerability in public_html/lists/admin in phpList before 2.10.18 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2026-63100

CVE-2026-63100HIGH

Maybe 0.6.0 Missing Authorization via HostingsController show/update

41RISCO

abrir ↗

Referência

CVE-2026-11575

CVE-2026-11575HIGH

PhonePe Payment Solutions < 3.1.0 - Unauthenticated Payment Bypass via Forged Callback

41RISCO

abrir ↗

Referência✓ VexDay Proof

JW Player - 'playerready' Cross-Site Scripting

CVE-2012-3351—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers

23RISCO

abrir ↗

Referência

CVE-2021-42237

CVE-2021-42237CRITICALsob ataqueransomware

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

100RISCO

abrir ↗

Referência

CVE-2026-12511

CVE-2026-12511HIGH

AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal

41RISCO

abrir ↗

Referência

CVE-2026-11567

CVE-2026-11567MEDIUM

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass

33RISCO

abrir ↗

Referência

CVE-2010-0796

CVE-2010-0796—

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2010-0796

CVE-2010-0796—

SQL injection vulnerability in the JE Quiz (com_jequizmanagement) component 1.b01 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2023-22515

CVE-2023-22515CRITICALsob ataqueransomware

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited

100RISCO

abrir ↗

Referência

CVE-2016-1105

CVE-2016-1105—

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsof

35RISCO

abrir ↗

Referência

CVE-2010-0802

CVE-2010-0802—

SQL injection vulnerability in index.php in (nv2) Awards 1.1.0, a modification for Invision Power Board, allows remote a

23RISCO

abrir ↗

Referência

CVE-2014-8322

CVE-2014-8322—

Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2014-8356

CVE-2014-8356—

The web administrative portal in Zhone zNID 2426A before S3.0.501 allows remote authenticated users to bypass intended a

23RISCO

abrir ↗

Referência

CVE-2010-4151

CVE-2010-4151—

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência

CVE-2022-30333

CVE-2022-30333HIGHsob ataqueransomware

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

100RISCO

abrir ↗

Referência

CVE-2026-15105

CVE-2026-15105MEDIUM

davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead out-of-bounds write

33RISCO

abrir ↗

Referência

CVE-2025-12506

CVE-2025-12506LOW

Use of Incorrectly-Resolved Name or Reference in GitLab

28RISCO

abrir ↗

Referência

CVE-2026-7492

CVE-2026-7492MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-12375

CVE-2026-12375CRITICAL

Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.