Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados
36.288CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentespopularesrisco
22.910 exploits
Referência
CVE-2026-14842
CVE-2026-14842MEDIUM
Events Made Easy < 3.1.2 - Unauthenticated Payment Bypass
33RISCO
abrir ↗
Referência
CVE-2026-14812
CVE-2026-14812CRITICAL
Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)
48RISCO
abrir ↗
Referência
CVE-2025-15662
CVE-2025-15662HIGH
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
41RISCO
abrir ↗
Referência
CVE-2026-13399
CVE-2026-13399HIGH
Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order
41RISCO
abrir ↗
Referência
CVE-2026-14306
CVE-2026-14306MEDIUM
Tutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass
33RISCO
abrir ↗
Referência
CVE-2026-12584
CVE-2026-12584HIGH
Payment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay Callback
41RISCO
abrir ↗
Referência
CVE-2006-6184
CVE-2006-6184—
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗
Referência
CVE-2006-6184
CVE-2006-6184—
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗
Referência
CVE-2026-11361
CVE-2026-11361MEDIUM
Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
33RISCO
abrir ↗
Referência
CVE-2026-66748
CVE-2026-66748HIGH
Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field
41RISCO
abrir ↗
Referência
CVE-2026-43760
CVE-2026-43760HIGH
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe
41RISCO
abrir ↗
Referência
CVE-2026-14798
CVE-2026-14798MEDIUM
CodeAstro Apartment Visitor Management System visitor-entry.php sql injection
33RISCO
abrir ↗
Referência
CVE-2026-39931
CVE-2026-39931HIGH
OpenEMR Authenticated SQL Injection via backup.php Import Feature
41RISCO
abrir ↗
Referência
CVE-2026-15193
CVE-2026-15193MEDIUM
AidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection
33RISCO
abrir ↗
Referência
CVE-2026-15184
CVE-2026-15184MEDIUM
GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference
33RISCO
abrir ↗
Referência
CVE-2026-41453
CVE-2026-41453HIGH
Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter
41RISCO
abrir ↗
Referência
CVE-2026-18604
CVE-2026-18604MEDIUM
textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components
33RISCO
abrir ↗
Referência
CVE-2018-19113
CVE-2018-19113—
The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)
23RISCO
abrir ↗
Referência✓ VexDay Proof
SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection
CVE-2006-6191—webappsasp
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execut
23RISCO
abrir ↗
Referência
CVE-2026-66746
CVE-2026-66746MEDIUM
Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection
33RISCO
abrir ↗
Referência
CVE-2026-64822
CVE-2026-64822MEDIUM
djangoSIGE 1.10 User Enumeration via ForgotPasswordView
33RISCO
abrir ↗
Referência✓ VexDay Proof
PEGames - 'index.php' Remote File Inclusion
CVE-2006-6213—webappsphp
index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct
23RISCO
abrir ↗
Referência✓ VexDay Proof
Wallpaper Complete Website 1.0.09 - SQL Injection
CVE-2006-6214—webappsphp
SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote atta
23RISCO
abrir ↗
Referência
CVE-2023-47268
CVE-2023-47268MEDIUM
In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrar
33RISCO
abrir ↗
Referência
CVE-2024-46508
CVE-2024-46508HIGH
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting
41RISCO
abrir ↗
Referência✓ VexDay Proof
Hacks List phpBB Mod 1.21 - SQL Injection
CVE-2006-6216—webappsphp
SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remot
23RISCO
abrir ↗
Referência
CVE-2026-13694
CVE-2026-13694MEDIUM
Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass
33RISCO
abrir ↗
Referência
CVE-2026-13693
CVE-2026-13693MEDIUM
Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal
33RISCO
abrir ↗
Referência
CVE-2020-20277
CVE-2020-20277—
There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server ver
28RISCO
abrir ↗
Referência✓ VexDay Proof
Recipes Complete Website 1.1.14 - SQL Injection
CVE-2006-6220—webappsphp
Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to ex
23RISCO
abrir ↗
← anteriorpágina 758 / 764próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.