Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-1631

CVE-2026-1631MEDIUM

Feeds for YouTube < 2.6.4 - Subscriber+ License Data Deletion

33RISCO

abrir ↗

Referência

CVE-2018-6367

CVE-2018-6367—

SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parame

23RISCO

abrir ↗

Referência

CVE-2018-6368

CVE-2018-6368—

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed acti

23RISCO

abrir ↗

Referência

CVE-2026-4524

CVE-2026-4524MEDIUM

Authentication Bypass Using an Alternate Path or Channel in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-4527

CVE-2026-4527MEDIUM

Cross-Site Request Forgery (CSRF) in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-19383

CVE-2026-19383MEDIUM

saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload

33RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - 'ping' Remote Buffer Overflow

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência✓ VexDay Proof

CCProxy 6.2 - Telnet Proxy Ping Overflow (Metasploit)

CVE-2004-2685—remotewindows

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long addre

28RISCO

abrir ↗

Referência

CVE-2018-6789

CVE-2018-6789CRITICALsob ataqueransomware

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes

100RISCO

abrir ↗

Referência

CVE-2026-19195

CVE-2026-19195HIGH

V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control

41RISCO

abrir ↗

Referência

CVE-2026-19193

CVE-2026-19193HIGH

Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control

41RISCO

abrir ↗

Referência

CVE-2026-19108

CVE-2026-19108MEDIUM

MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free

33RISCO

abrir ↗

Referência

CVE-2019-0539

CVE-2019-0539—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

Referência

CVE-2025-15674

CVE-2025-15674LOW

Content Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST API

28RISCO

abrir ↗

Referência

CVE-2026-16620

CVE-2026-16620HIGH

WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode

41RISCO

abrir ↗

Referência

CVE-2026-16619

CVE-2026-16619HIGH

miniOrange 2FA < 6.2.8 - 2FA Bypass via Unlimited Second-Factor Attempts

41RISCO

abrir ↗

Referência

CVE-2026-19062

CVE-2026-19062MEDIUM

chiuwingyan house selectall.action sql injection

33RISCO

abrir ↗

Referência

CVE-2019-0539

CVE-2019-0539—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

Referência

CVE-2018-6888

CVE-2018-6888—

An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cro

23RISCO

abrir ↗

Referência

CVE-2018-6892

CVE-2018-6892—

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sy

60RISCO

abrir ↗

Referência

CVE-2019-0541

CVE-2019-0541HIGHsob ataque

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML E

83RISCO

abrir ↗

Referência

CVE-2019-0708

CVE-2019-0708CRITICALsob ataqueransomware

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

abrir ↗

Referência

CVE-2026-16532

CVE-2026-16532CRITICAL

Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

48RISCO

abrir ↗

Referência

CVE-2026-12696

CVE-2026-12696MEDIUM

wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field

33RISCO

abrir ↗

Referência

CVE-2026-15234

CVE-2026-15234MEDIUM

Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute

33RISCO

abrir ↗

Referência

CVE-2026-15262

CVE-2026-15262MEDIUM

Admin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value Column

33RISCO

abrir ↗

Referência

CVE-2026-14847

CVE-2026-14847MEDIUM

Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR

33RISCO

abrir ↗

Referência✓ VexDay Proof

Roundcube Webmail 0.2b - Remote Code Execution

CVE-2008-5619—webappsphp

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail)

35RISCO

abrir ↗

Referência✓ VexDay Proof

phpMyAdmin 3.1.0 - Cross-Site Request Forgery / SQL Injection

CVE-2008-5621—webappsphp

Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remot

23RISCO

abrir ↗

Referência

CVE-2018-12465

CVE-2018-12465CRITICAL

Remote Code Execution in Micro Focus Secure Messaging Gateway

85RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.