Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados
36.206CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentespopularesrisco
22.832 exploits
Referência
CVE-2017-20282
CVE-2017-20282HIGH
Joomla! Component jCart for OpenCart 2.0 SQL Injection
41RISCO
abrir ↗
Referência
CVE-2017-20281
CVE-2017-20281HIGH
Joomla! Component Extra Search 2.2.8 SQL Injection
41RISCO
abrir ↗
Referência
CVE-2017-20280
CVE-2017-20280HIGH
Joomla Component Myportfolio 3.0.2 SQL Injection via pid Parameter
41RISCO
abrir ↗
Referência
CVE-2017-20279
CVE-2017-20279HIGH
Joomla Payage 2.05 SQL Injection via aid Parameter
41RISCO
abrir ↗
Referência
CVE-2017-20278
CVE-2017-20278HIGH
Joomla JoomRecipe 1.0.3 SQL Injection via category parameter
41RISCO
abrir ↗
Referência✓ VexDay Proof
XHP CMS 0.5 - 'upload' Remote Command Execution
CVE-2006-1371—webappsphp
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea Fil
23RISCO
abrir ↗
Referência
CVE-2026-24066
CVE-2026-24066HIGH
Slate Digital Connect macOS XPC certificate validation privilege escalation
41RISCO
abrir ↗
Referência
CVE-2017-20249
CVE-2017-20249HIGH
WordPress Plugin Apptha Slider Gallery 1.0 SQL Injection
41RISCO
abrir ↗
Referência
CVE-2017-20248
CVE-2017-20248HIGH
WordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File Download
41RISCO
abrir ↗
Referência
CVE-2026-11533
CVE-2026-11533MEDIUM
imvks786 student_management_system Student Deletion Endpoint see.php improper authorization
33RISCO
abrir ↗
Referência✓ VexDay Proof
PHP Ticket 0.71 - 'search.php' SQL Injection
CVE-2006-1481—webappsphp
SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL
23RISCO
abrir ↗
Referência
CVE-2026-11532
CVE-2026-11532MEDIUM
imvks786 student_management_system Student Record add.php access control
33RISCO
abrir ↗
Referência
CVE-2016-20066
CVE-2016-20066MEDIUM
WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
33RISCO
abrir ↗
Referência
CVE-2026-9067
CVE-2026-9067CRITICAL
Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload
48RISCO
abrir ↗
Referência
CVE-2026-11558
CVE-2026-11558MEDIUM
CodeAstro Payroll System home_salary.php sql injection
33RISCO
abrir ↗
Referência
CVE-2026-11557
CVE-2026-11557HIGH
Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow
41RISCO
abrir ↗
Referência
CVE-2026-39908
CVE-2026-39908HIGH
OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source
41RISCO
abrir ↗
Referência
CVE-2026-11506
CVE-2026-11506MEDIUM
CodeAstro Leave Management System search_staff_for_deletion.php sql injection
33RISCO
abrir ↗
Referência
CVE-2026-11504
CVE-2026-11504HIGH
Tenda CX12L Wi-Fi Schedule Configuration Endpoint openSchedWifi setSchedWifi stack-based overflow
41RISCO
abrir ↗
Referência✓ VexDay Proof
Microsoft Office Products - Array Index Bounds Error (PoC)
CVE-2006-1540—doswindows
MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of
28RISCO
abrir ↗
Referência✓ VexDay Proof
Python 2.4.2 - 'realpath()' Local Stack Overflow
CVE-2006-1542—locallinux
Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allo
23RISCO
abrir ↗
Referência
CVE-2018-15982
CVE-2018-15982HIGHsob ataqueransomware
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful
93RISCO
abrir ↗
Referência
CVE-2018-16252
CVE-2018-16252—
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
23RISCO
abrir ↗
Referência
CVE-2018-16252
CVE-2018-16252—
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
23RISCO
abrir ↗
Referência
CVE-2018-16763
CVE-2018-16763—
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗
Referência
CVE-2018-16763
CVE-2018-16763—
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
abrir ↗
Referência
CVE-2025-15686
CVE-2025-15686MEDIUM
Open5GS HSS Service fd_msg_sess_get denial of service
33RISCO
abrir ↗
Referência
CVE-2026-10529
CVE-2026-10529MEDIUM
westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting
33RISCO
abrir ↗
Referência
CVE-2026-10276
CVE-2026-10276MEDIUM
hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery
33RISCO
abrir ↗
Referência
CVE-2026-10275
CVE-2026-10275LOW
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow
28RISCO
abrir ↗
← anteriorpágina 741 / 762próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.