Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência

CVE-2026-19211

CVE-2026-19211MEDIUM

SourceCodester Photo Share Website ajax.php signup sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15048

CVE-2026-15048HIGH

GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History

41RISCO

abrir ↗

Referência

CVE-2026-14931

CVE-2026-14931MEDIUM

JS Help Desk < 3.1.4 - Contributor+ User Email Disclosure

33RISCO

abrir ↗

Referência

CVE-2026-14930

CVE-2026-14930HIGH

JS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment Upload

41RISCO

abrir ↗

Referência

CVE-2026-14929

CVE-2026-14929MEDIUM

JS Help Desk < 3.1.4 - Subscriber+ Ticket Reply Modification via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-14928

CVE-2026-14928MEDIUM

JS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubject

33RISCO

abrir ↗

Referência

CVE-2026-14927

CVE-2026-14927LOW

FluentCart < 1.5.3 - Unauthenticated Order PII Disclosure via Print Routes

28RISCO

abrir ↗

Referência

CVE-2026-14922

CVE-2026-14922MEDIUM

WP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo Comment

33RISCO

abrir ↗

Referência✓ VexDay Proof

Mambo Component com_flyspray < 1.0.1 - Remote File Disclosure

CVE-2006-6203—webappsphp

Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows re

23RISCO

abrir ↗

Referência

CVE-2026-13597

CVE-2026-13597CRITICAL

QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

48RISCO

abrir ↗

Referência

CVE-2026-63720

CVE-2026-63720HIGH

datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

41RISCO

abrir ↗

Referência

CVE-2018-25351

CVE-2018-25351HIGH

Joomla! Component EkRishta 2.10 SQL Injection via username

41RISCO

abrir ↗

Referência

CVE-2026-9299

CVE-2026-9299MEDIUM

omec-project amf handler.go PDUSessionResourceModifyIndication memory corruption

33RISCO

abrir ↗

Referência

CVE-2026-9298

CVE-2026-9298MEDIUM

omec-project amf PathSwitchRequest memory corruption

33RISCO

abrir ↗

Referência✓ VexDay Proof

PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion

CVE-2006-6202—webappsphp

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pro

23RISCO

abrir ↗

Referência

CVE-2019-2000

CVE-2019-2000—

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local

23RISCO

abrir ↗

Referência

CVE-2018-25410

CVE-2018-25410HIGH

SIM-PKH 2.4.1 SQL Injection via media.php id Parameter

41RISCO

abrir ↗

Referência

CVE-2018-25409

CVE-2018-25409HIGH

SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php

41RISCO

abrir ↗

Referência

CVE-2026-9405

CVE-2026-9405CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9381

CVE-2026-9381HIGH

Edimax BR-6675nD POST Request formPPPoESetup buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-9380

CVE-2026-9380HIGH

Edimax BR-6675nD POST Request formL2TPSetup buffer overflow

41RISCO

abrir ↗

Referência

CVE-2018-25408

CVE-2018-25408HIGH

The Open ISES Project 3.30A Path Traversal Arbitrary File Download

41RISCO

abrir ↗

Referência

CVE-2026-13511

CVE-2026-13511LOW

VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization

28RISCO

abrir ↗

Referência✓ VexDay Proof

CoolPlayer 2.17 - '.m3u' Local Stack Overflow

CVE-2006-6288—localwindows

Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Referência

CVE-2026-50656

CVE-2026-50656HIGH

Microsoft Defender Elevation of Privilege Vulnerability

46RISCO

abrir ↗

Referência

CVE-2026-12787

CVE-2026-12787MEDIUM

zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection Endpoint deserialization

33RISCO

abrir ↗

Referência

CVE-2026-12130

CVE-2026-12130MEDIUM

CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting

33RISCO

abrir ↗

Referência

CVE-2018-25407

CVE-2018-25407HIGH

eNdonesia Portal 8.7 SQL Injection via mod.php

41RISCO

abrir ↗

Referência

CVE-2018-25406

CVE-2018-25406HIGH

eNdonesia Portal 8.7 SQL Injection via mod.php

41RISCO

abrir ↗

Referência

CVE-2026-13510

CVE-2026-13510MEDIUM

SimStudioAI sim Password Protection deployment.ts weak hash

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.