Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

abrir ↗

Referência

CVE-2026-55200

CVE-2026-55200CRITICAL

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

48RISCO

abrir ↗

Referência

CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

abrir ↗

Referência

CVE-2017-5638

CVE-2017-5638CRITICALsob ataqueransomware

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

abrir ↗

Referência

CVE-2026-12193

CVE-2026-12193HIGH

VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-12193

CVE-2026-12193HIGH

VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow

41RISCO

abrir ↗

Referência

CVE-2017-17603

CVE-2017-17603—

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_

23RISCO

abrir ↗

Referência

CVE-2026-18766

CVE-2026-18766MEDIUM

chetans9 core-php-admin-panel customers.php sql injection

33RISCO

abrir ↗

Referência

CVE-2017-17611

CVE-2017-17611—

Doctor Search Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17613

CVE-2017-17613—

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati

23RISCO

abrir ↗

Referência

CVE-2017-17613

CVE-2017-17613—

Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php cati

23RISCO

abrir ↗

Referência

CVE-2017-17614

CVE-2017-17614—

Food Order Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2026-18646

CVE-2026-18646MEDIUM

danpros HTMLy Author Name htmly.php path traversal

33RISCO

abrir ↗

Referência

CVE-2026-18631

CVE-2026-18631MEDIUM

jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization

33RISCO

abrir ↗

Referência

CVE-2017-17614

CVE-2017-17614—

Food Order Script 1.0 has SQL Injection via the /list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17616

CVE-2017-17616—

Event Search Script 1.0 has SQL Injection via the /event-list city parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISCO

abrir ↗

Referência

CVE-2017-17617

CVE-2017-17617—

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

Internet Download Accelerator 5.2 - Remote Buffer Overflow (PoC)

CVE-2007-3162—doswindows

Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac

23RISCO

abrir ↗

Referência

CVE-2026-12188

CVE-2026-12188MEDIUM

Grit42 Grit GritEntityController grit_entity_controller.rb sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11516

CVE-2026-11516MEDIUM

UTT HiPER 2610G formNatStaticMap strcpy buffer overflow

33RISCO

abrir ↗

Referência

CVE-2026-11510

CVE-2026-11510MEDIUM

CodeAstro Leave Management System add_leave.php sql injection

33RISCO

abrir ↗

Referência

CVE-2021-47984

CVE-2021-47984MEDIUM

WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2026-11477

CVE-2026-11477MEDIUM

hs-web hsweb-framework OAuth2 Client OAuth2Client.java OAuth2Client redirect

33RISCO

abrir ↗

Referência✓ VexDay Proof

EDraw Office Viewer Component - Unsafe Method

CVE-2007-3168—remotewindows

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo

23RISCO

abrir ↗

Referência

CVE-2026-75797

CVE-2026-75797HIGH

AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-19094

CVE-2026-19094MEDIUM

Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters

33RISCO

abrir ↗

Referência

CVE-2026-58053

CVE-2026-58053CRITICAL

Gitea act_runner - Container Hardening Bypass via Workflow Container Options

48RISCO

abrir ↗

Referência

CVE-2026-58052

CVE-2026-58052MEDIUM

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.