Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência

CVE-2018-18800

CVE-2018-18800—

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=

23RISCO

abrir ↗

Referência

CVE-2018-18801

CVE-2018-18801—

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=

23RISCO

abrir ↗

Referência

CVE-2018-18801

CVE-2018-18801—

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=

23RISCO

abrir ↗

Referência

CVE-2018-18803

CVE-2018-18803—

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb

23RISCO

abrir ↗

Referência

CVE-2018-18803

CVE-2018-18803—

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb

23RISCO

abrir ↗

Referência

CVE-2018-18804

CVE-2018-18804—

Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

23RISCO

abrir ↗

Referência

CVE-2018-18805

CVE-2018-18805—

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.

23RISCO

abrir ↗

Referência

CVE-2026-12976

CVE-2026-12976MEDIUM

LearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI Assistant

33RISCO

abrir ↗

Referência

CVE-2026-18044

CVE-2026-18044LOW

Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Arbitrary-Recipient Mail Relay via Signed-Value Mismatch

28RISCO

abrir ↗

Referência

CVE-2025-15687

CVE-2025-15687MEDIUM

Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service

33RISCO

abrir ↗

Referência

CVE-2018-19041

CVE-2018-19041—

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the

23RISCO

abrir ↗

Referência

CVE-2026-8224

CVE-2026-8224MEDIUM

Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8223

CVE-2026-8223MEDIUM

Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8222

CVE-2026-8222MEDIUM

Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_management_handle_register denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8221

CVE-2026-8221MEDIUM

Devs Palace ERP Online item-save cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-8220

CVE-2026-8220MEDIUM

Devs Palace ERP Online customer-save cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-8219

CVE-2026-8219MEDIUM

Devs Palace ERP Online supplier-save cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-8218

CVE-2026-8218MEDIUM

Devs Palace ERP Online purchase_return_save cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-8217

CVE-2026-8217MEDIUM

Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection

33RISCO

abrir ↗

Referência

CVE-2026-8217

CVE-2026-8217MEDIUM

Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

CVE-2006-5975—webappsasp

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbit

23RISCO

abrir ↗

Referência

CVE-2026-19343

CVE-2026-19343MEDIUM

code-projects Task Management System AdminLogin.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-19342

CVE-2026-19342MEDIUM

code-projects Task Management System Login index.php improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-19341

CVE-2026-19341HIGH

UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-19229

CVE-2026-19229MEDIUM

SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-19213

CVE-2026-19213MEDIUM

WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow

33RISCO

abrir ↗

Referência✓ VexDay Proof

XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow

CVE-2006-6063—localwindows

Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via

50RISCO

abrir ↗

Referência✓ VexDay Proof

Powies pForum 1.29a - 'editpoll.php' SQL Injection

CVE-2006-6038—webappsphp

SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to e

23RISCO

abrir ↗

Referência✓ VexDay Proof

e-Ark 1.0 - '/src/ark_inc.php' Remote File Inclusion

CVE-2006-6086—webappsphp

PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP

23RISCO

abrir ↗

Referência

CVE-2026-19212

CVE-2026-19212MEDIUM

WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.