Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

22.233 exploits

Referência

CVE-2018-25281

CVE-2018-25281MEDIUM

iCash 7.6.5 Denial of Service via Connect to Server

33RISCO

abrir ↗

Referência

CVE-2018-25280

CVE-2018-25280MEDIUM

Infiltrator Network Security Scanner 4.6 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25279

CVE-2018-25279MEDIUM

jiNa OCR Image to Text 1.0 Denial of Service via PNG

33RISCO

abrir ↗

Referência

CVE-2018-25278

CVE-2018-25278MEDIUM

PicaJet FX 2.6.5 Denial of Service via Registration Fields

33RISCO

abrir ↗

Referência

CVE-2018-0752

CVE-2018-0752—

The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709

23RISCO

abrir ↗

Referência

CVE-2018-0823

CVE-2018-0823—

The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege

23RISCO

abrir ↗

Referência

CVE-2026-5806

CVE-2026-5806MEDIUM

code-projects Easy Blog Site update.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5805

CVE-2026-5805MEDIUM

code-projects Easy Blog Site contact_us.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5803

CVE-2026-5803MEDIUM

bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5802

CVE-2026-5802MEDIUM

idachev mcp-javadc HTTP os command injection

33RISCO

abrir ↗

Referência

CVE-2026-4338

CVE-2026-4338HIGH

ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

41RISCO

abrir ↗

Referência

CVE-2026-5741

CVE-2026-5741MEDIUM

suvarchal docker-mcp-server HTTP index.ts pull_image os command injection

33RISCO

abrir ↗

Referência

CVE-2018-0838

CVE-2018-0838—

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot

35RISCO

abrir ↗

Referência

CVE-2018-0860

CVE-2018-0860—

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot

35RISCO

abrir ↗

Referência

CVE-2018-25277

CVE-2018-25277MEDIUM

PixGPS 1.1.8 Buffer Overflow Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25276

CVE-2018-25276MEDIUM

RoboImport 1.2.0.72 Denial of Service via Registration Fields

33RISCO

abrir ↗

Referência

CVE-2018-25275

CVE-2018-25275MEDIUM

Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25274

CVE-2018-25274MEDIUM

InfraRecorder 0.53 Denial of Service via txt File Import

33RISCO

abrir ↗

Referência

CVE-2018-25273

CVE-2018-25273MEDIUM

CrossFont 7.5 Denial of Service via License Key Field

33RISCO

abrir ↗

Referência

CVE-2018-0897

CVE-2018-0897—

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Serve

23RISCO

abrir ↗

Referência

CVE-2026-7019

CVE-2026-7019HIGH

Tenda F456 P2pListFilter fromP2pListFilter buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7018

CVE-2026-7018MEDIUM

Datavane Datavines JWT Token TokenManager.java hard-coded key

33RISCO

abrir ↗

Referência

CVE-2026-7016

CVE-2026-7016MEDIUM

MaxSite CMS ushki Plugin cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7015

CVE-2026-7015MEDIUM

MaxSite CMS Guestbook Plugin cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7014

CVE-2026-7014MEDIUM

MaxSite CMS down_count Plugin cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7013

CVE-2026-7013MEDIUM

MaxSite CMS mail_send Plugin cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7012

CVE-2026-7012MEDIUM

MaxSite CMS Redirect Plugin cross site scripting

33RISCO

abrir ↗

Referência

CVE-2024-14032

CVE-2024-14032HIGH

Twitch Studio LauncherHelper XPC Missing Authorization to Root File Write

41RISCO

abrir ↗

Referência

CVE-2026-5666

CVE-2026-5666MEDIUM

code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information

33RISCO

abrir ↗

Referência

CVE-2026-5665

CVE-2026-5665MEDIUM

code-projects Online FIR System Login checklogin.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.