Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2024-58344

CVE-2024-58344MEDIUM

Carbon Forum 5.9.0 Persistent XSS via Forum Name Field

33RISCO

abrir ↗

Referência

CVE-2018-25272

CVE-2018-25272CRITICAL

ELBA5 5.8.0 Remote Code Execution via Database Access

48RISCO

abrir ↗

Referência

CVE-2018-25271

CVE-2018-25271MEDIUM

Textpad 8.1.2 Denial of Service via Run Command

33RISCO

abrir ↗

Referência

CVE-2018-25270

CVE-2018-25270CRITICAL

ThinkPHP 5.0.23 Remote Code Execution via invokefunction

48RISCO

abrir ↗

Referência

CVE-2018-25269

CVE-2018-25269MEDIUM

ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

33RISCO

abrir ↗

Referência

CVE-2018-25268

CVE-2018-25268HIGH

LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field

41RISCO

abrir ↗

Referência

CVE-2018-25267

CVE-2018-25267MEDIUM

UltraISO 9.7.1.3519 Buffer Overflow via Output FileName

33RISCO

abrir ↗

Referência

CVE-2018-25266

CVE-2018-25266MEDIUM

Angry IP Scanner 3.5.3 Denial of Service via Preferences Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25265

CVE-2018-25265HIGH

LanSpy 2.0.1.159 Local Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2018-25262

CVE-2018-25262MEDIUM

Angry IP Scanner for Linux 3.5.3 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25261

CVE-2018-25261HIGH

Iperius Backup 5.8.1 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-25260

CVE-2018-25260HIGH

MAGIX Music Editor 3.1 Buffer Overflow via SEH

41RISCO

abrir ↗

Referência

CVE-2018-25259

CVE-2018-25259HIGH

Terminal Services Manager 3.1 Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2026-7403

CVE-2026-7403MEDIUM

geldata gel-mcp server.py fetch_rule path traversal

33RISCO

abrir ↗

Referência

CVE-2014-4307

CVE-2014-4307—

SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2026-34965

CVE-2026-34965HIGH

Cockpit CMS Authenticated Remote Code Execution via Collections

41RISCO

abrir ↗

Referência

CVE-2018-25311

CVE-2018-25311HIGH

VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal

41RISCO

abrir ↗

Referência

CVE-2018-25310

CVE-2018-25310MEDIUM

VideoFlow Digital Video Protection DVP 2.10 - Authenticated Remote Code Execution

33RISCO

abrir ↗

Referência

CVE-2018-17384

CVE-2018-17384—

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Softerra PHP Developer Library 1.5.3 - Remote File Inclusion

CVE-2006-5472—webappsphp

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2026-41949

CVE-2026-41949HIGH

Dify < 1.14.2 Authorization Bypass via File Preview Endpoint

41RISCO

abrir ↗

Referência✓ VexDay Proof

CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion

CVE-2006-5480—webappsphp

PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - 'ping' Remote Buffer Overflow

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - Telnet Proxy Ping Overflow (Metasploit)

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência✓ VexDay Proof

DigitalHive 2.0 RC2 - 'base_include.php' Remote File Inclusion

CVE-2006-5493—webappsphp

PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

pandaBB - 'displayCategory' Remote File Inclusion

CVE-2006-5494—webappsphp

Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB modu

23RISCO

abrir ↗

Referência

CVE-2026-16547

CVE-2026-16547MEDIUM

REST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download Endpoint

33RISCO

abrir ↗

Referência

CVE-2026-16546

CVE-2026-16546MEDIUM

Wired Impact Volunteer Management < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp

33RISCO

abrir ↗

Referência

CVE-2026-16565

CVE-2026-16565MEDIUM

Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API

33RISCO

abrir ↗

Referência

CVE-2026-16564

CVE-2026-16564MEDIUM

Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.