Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2026-6487

CVE-2026-6487MEDIUM

Qihui jtbc5 CMS Code Endpoint manage.php path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6486

CVE-2026-6486MEDIUM

classroombookings User Display Name layout.php read cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6483

CVE-2026-6483HIGH

Wavlink WL-WN530H4 internet.cgi snprintf os command injection

46RISCO

abrir ↗

Referência

CVE-2026-6148

CVE-2026-6148MEDIUM

code-projects Vehicle Showroom Management System MonthTotalReportUpdateFunction.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6140

CVE-2026-6140CRITICAL

Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6139

CVE-2026-6139CRITICAL

Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6138

CVE-2026-6138CRITICAL

Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6129

CVE-2026-6129MEDIUM

zhayujie chatgpt-on-wechat CowAgent Agent Mode Service missing authentication

33RISCO

abrir ↗

Referência

CVE-2019-25712

CVE-2019-25712MEDIUM

BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key

33RISCO

abrir ↗

Referência

CVE-2019-25711

CVE-2019-25711MEDIUM

SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

33RISCO

abrir ↗

Referência

CVE-2019-25710

CVE-2019-25710HIGH

Dolibarr ERP-CRM 8.0.4 SQL Injection via rowid Parameter

41RISCO

abrir ↗

Referência

CVE-2019-25709

CVE-2019-25709CRITICAL

CF Image Hosting Script 1.6.5 Unauthorized Database Access

48RISCO

abrir ↗

Referência

CVE-2019-25708

CVE-2019-25708MEDIUM

Heatmiser Wifi Thermostat 1.7 Cross-Site Request Forgery

33RISCO

abrir ↗

Referência

CVE-2019-25705

CVE-2019-25705HIGH

Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

41RISCO

abrir ↗

Referência

CVE-2019-25703

CVE-2019-25703HIGH

ImpressCMS 1.3.11 SQL Injection via bid Parameter

41RISCO

abrir ↗

Referência

CVE-2019-25701

CVE-2019-25701HIGH

Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2019-25697

CVE-2019-25697HIGH

CMSsite 1.0 SQL Injection via category.php

41RISCO

abrir ↗

Referência

CVE-2019-25695

CVE-2019-25695HIGH

R 3.4.4 Local Buffer Overflow Windows XP SP3

41RISCO

abrir ↗

Referência

CVE-2019-25693

CVE-2019-25693HIGH

ResourceSpace 8.6 SQL Injection via collection_edit.php

41RISCO

abrir ↗

Referência

CVE-2019-25691

CVE-2019-25691HIGH

Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2019-25689

CVE-2019-25689HIGH

HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

41RISCO

abrir ↗

Referência

CVE-2018-25258

CVE-2018-25258HIGH

RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2018-25257

CVE-2018-25257HIGH

Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

41RISCO

abrir ↗

Referência

CVE-2017-20239

CVE-2017-20239MEDIUM

MDwiki Cross-Site Scripting via Location Hash Parameter

33RISCO

abrir ↗

Referência

CVE-2026-6126

CVE-2026-6126MEDIUM

zhayujie chatgpt-on-wechat CowAgent Administrative HTTP Endpoint missing authentication

33RISCO

abrir ↗

Referência✓ VexDay Proof

Chaussette 080706 - '_BASE' Remote File Inclusion

CVE-2006-4159—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute ar

28RISCO

abrir ↗

Referência

CVE-2010-4280

CVE-2010-4280—

Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2017-7690

CVE-2017-7690—

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w

23RISCO

abrir ↗

Referência

CVE-2026-14440

CVE-2026-14440HIGH

Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

41RISCO

abrir ↗

Referência

CVE-2026-58451

CVE-2026-58451HIGH

Horde IMP < 7.0.1 Path Traversal via Compose.php img src

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.