Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.832 exploits

Referência

CVE-2026-15622

CVE-2026-15622MEDIUM

poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization

33RISCO

abrir ↗

Referência

CVE-2026-62239

CVE-2026-62239MEDIUM

FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py

33RISCO

abrir ↗

Referência✓ VexDay Proof

CaupoShop Pro 2.x - 'action' Remote File Inclusion

CVE-2007-5784—webappsphp

PHP remote file inclusion vulnerability in index.php in CaupoShop Pro 2.x allows remote attackers to execute arbitrary P

23RISCO

abrir ↗

Referência

CVE-2026-12397

CVE-2026-12397MEDIUM

WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-15607

CVE-2026-15607MEDIUM

tanstack db Alias Path select.ts select prototype pollution

33RISCO

abrir ↗

Referência

CVE-2026-12780

CVE-2026-12780HIGH

AOMEI Backupper Kernel Driver amwrtdrv.sys access control

41RISCO

abrir ↗

Referência✓ VexDay Proof

Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation

CVE-2008-3234—remotelinux

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain ac

23RISCO

abrir ↗

Referência✓ VexDay Proof

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

CVE-2007-6147—webappsphp

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2026-9822

CVE-2026-9822MEDIUM

WP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX Handlers

33RISCO

abrir ↗

Referência✓ VexDay Proof

Arctic Issue Tracker 2.0.0 - 'filter' SQL Injection (2)

CVE-2008-3250—webappsphp

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2018-11412

CVE-2018-11412—

In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untruste

28RISCO

abrir ↗

Referência

CVE-2018-11445

CVE-2018-11445—

A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing

23RISCO

abrir ↗

Referência

CVE-2026-10873

CVE-2026-10873HIGH

Shibby Tomato Web UI rstats rstats_path os command injection

41RISCO

abrir ↗

Referência

CVE-2026-10567

CVE-2026-10567MEDIUM

1Panel-dev CordysCRM ModuleFormController ModuleFormService.java save cross site scripting

33RISCO

abrir ↗

Referência

CVE-2018-25434

CVE-2018-25434HIGH

WP AutoSuggest 0.24 SQL Injection via autosuggest.php

41RISCO

abrir ↗

Referência

CVE-2018-25433

CVE-2018-25433HIGH

Joomla JE Photo Gallery 1.1 SQL Injection via categoryid

41RISCO

abrir ↗

Referência

CVE-2018-25432

CVE-2018-25432HIGH

Arm Whois 3.11 Buffer Overflow via ASLR Bypass

41RISCO

abrir ↗

Referência

CVE-2026-10273

CVE-2026-10273MEDIUM

php-censor Webhook Endpoint GitBuild.php os command injection

33RISCO

abrir ↗

Referência

CVE-2026-6324

CVE-2026-6324MEDIUM

Libsoup: libsoup: http request smuggling via unsigned to signed conversion error

33RISCO

abrir ↗

Referência

CVE-2018-11776

CVE-2018-11776HIGHsob ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

abrir ↗

Referência

CVE-2018-11776

CVE-2018-11776HIGHsob ataque

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

abrir ↗

Referência✓ VexDay Proof

Plogger 3.0 - SQL Injection

CVE-2008-3563—webappsphp

Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2026-9606

CVE-2026-9606MEDIUM

itsourcecode Courier Management System manage_user.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9605

CVE-2026-9605MEDIUM

GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-44195

CVE-2026-44195MEDIUM

OPNsense: Authentication lockout bypass

33RISCO

abrir ↗

Referência✓ VexDay Proof

IP Reg 0.4 - Multiple SQL Injections

CVE-2008-4606—webappsphp

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

Joomla! Component JEXTN Membership 3.1.0 - 'usr_plan' SQL Injection

CVE-2018-6577—webappsphp

SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&ta

23RISCO

abrir ↗

Referência✓ VexDay Proof

Eurologon CMS - 'files.php' Arbitrary File Download

CVE-2007-6185—webappsphp

Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files vi

23RISCO

abrir ↗

Referência

Joomla! Component JEXTN Reverse Auction 3.1.0 - SQL Injection

CVE-2018-6579—webappsphp

SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request.

23RISCO

abrir ↗

Referência

CVE-2019-0211

CVE-2019-0211HIGHsob ataque

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege

83RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.