Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2021-22986

CVE-2021-22986CRITICALsob ataqueransomware

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RISCO

abrir ↗

Referência

CVE-2010-3211

CVE-2010-3211—

Multiple SQL injection vulnerabilities in the JE FAQ Pro (com_jefaqpro) component 1.5.0 for Joomla! allow remote attacke

23RISCO

abrir ↗

Referência

CVE-2010-3212

CVE-2010-3212—

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2026-16327

CVE-2026-16327MEDIUM

D-Link DNS-320 upload.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-76582

CVE-2026-76582MEDIUM

TRENDnet TEW-821DAP ssi ping.cgi system command injection

33RISCO

abrir ↗

Referência

CVE-2026-76576

CVE-2026-76576MEDIUM

yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal

33RISCO

abrir ↗

Referência

CVE-2026-11868

CVE-2026-11868MEDIUM

WP Travel < 11.7.1 - Unauthenticated Arbitrary Booking Cancellation

33RISCO

abrir ↗

Referência

CVE-2026-76574

CVE-2026-76574MEDIUM

code-projects Hospital Information System User Login UsersController.php login sql injection

33RISCO

abrir ↗

Referência

CVE-2026-61518

CVE-2026-61518HIGH

ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter

41RISCO

abrir ↗

Referência

CVE-2026-75148

CVE-2026-75148MEDIUM

cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check

13RISCO

abrir ↗

Referência

CVE-2026-19842

CVE-2026-19842HIGH

SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite

41RISCO

abrir ↗

Referência

CVE-2026-19782

CVE-2026-19782MEDIUM

WPS Bidouille < 1.33.5 - Subscriber+ User Email Disclosure via wps_get_users

33RISCO

abrir ↗

Referência

CVE-2026-19709

CVE-2026-19709MEDIUM

Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass

33RISCO

abrir ↗

Referência

CVE-2026-19417

CVE-2026-19417MEDIUM

KiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOR

33RISCO

abrir ↗

Referência✓ VexDay Proof

GuildFTPd 0.999.8.11/0.999.14 - Heap Corruption (PoC) / Denial of Service

CVE-2008-4572—doswindows

GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possib

50RISCO

abrir ↗

Referência✓ VexDay Proof

phpAuction 2.1 - 'phpAds_path' Remote File Inclusion

CVE-2006-3984—webappsphp

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later vers

23RISCO

abrir ↗

Referência✓ VexDay Proof

MunzurSoft Wep Portal W3 - 'kat' SQL Injection

CVE-2008-4573—webappsasp

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-4970

CVE-2010-4970—

SQL injection vulnerability in handlers/getpage.php in Wiki Web Help 0.28 allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência

CVE-2017-17570

CVE-2017-17570—

FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php fl_o

23RISCO

abrir ↗

Referência

CVE-2026-58054

CVE-2026-58054—

3RISCO

abrir ↗

Referência

CVE-2010-3306

CVE-2010-3306—

Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2017-17571

CVE-2017-17571—

FS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.

23RISCO

abrir ↗

Referência

CVE-2026-15256

CVE-2026-15256MEDIUM

Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default

33RISCO

abrir ↗

Referência

CVE-2026-17032

CVE-2026-17032CRITICAL

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

48RISCO

abrir ↗

Referência

CVE-2026-13342

CVE-2026-13342MEDIUM

Security Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password

33RISCO

abrir ↗

Referência

CVE-2026-15149

CVE-2026-15149MEDIUM

WP Hotel Booking < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation

33RISCO

abrir ↗

Referência

CVE-2016-2345

CVE-2016-2345—

Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows rem

35RISCO

abrir ↗

Referência

CVE-2026-49948

CVE-2026-49948HIGH

Mem0 0.2.8 Missing Authorization via POST /configure Endpoint

21RISCO

abrir ↗

Referência✓ VexDay Proof

PG Matchmaking Script - Multiple SQL Injections

CVE-2008-4665—webappsphp

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id param

23RISCO

abrir ↗

Referência

CVE-2026-15208

CVE-2026-15208MEDIUM

RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.