Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2016-20041

CVE-2016-20041HIGH

Yasr 0.6.9-5 Buffer Overflow via Command-line Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20040

CVE-2016-20040HIGH

TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20039

CVE-2016-20039HIGH

Multi Emulator Super System 0.154-3.1 Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2016-20038

CVE-2016-20038HIGH

yTree 1.94-1.1 Stack-Based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2016-20037

CVE-2016-20037HIGH

xwpe 1.5.30a-2.1 Stack-based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2026-4996

CVE-2026-4996MEDIUM

Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

33RISCO

abrir ↗

Referência

CVE-2026-4995

CVE-2026-4995MEDIUM

wandb OpenUI Window Message Event index.html cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-4994

CVE-2026-4994MEDIUM

wandb OpenUI APIStatusError server.py generic_exception_handler information exposure

33RISCO

abrir ↗

Referência

CVE-2026-4993

CVE-2026-4993MEDIUM

wandb OpenUI config.py hard-coded credentials

33RISCO

abrir ↗

Referência

CVE-2025-15445

CVE-2025-15445MEDIUM

Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation

33RISCO

abrir ↗

Referência

CVE-2026-9709

CVE-2026-9709HIGH

Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure

41RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2012-3810

CVE-2012-3810—

Samsung Kies before 2.5.0.12094_27_11 has registry modification.

23RISCO

abrir ↗

Referência

CVE-2018-18795

CVE-2018-18795—

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18795

CVE-2018-18795—

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18797

CVE-2018-18797—

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

23RISCO

abrir ↗

Referência

CVE-2018-18797

CVE-2018-18797—

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

23RISCO

abrir ↗

Referência

CVE-2018-18798

CVE-2018-18798—

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.ph

23RISCO

abrir ↗

Referência

CVE-2018-18798

CVE-2018-18798—

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.ph

23RISCO

abrir ↗

Referência

CVE-2012-3835

CVE-2012-3835—

Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.

23RISCO

abrir ↗

Referência

CVE-2012-3839

CVE-2012-3839—

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2018-18799

CVE-2018-18799—

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

23RISCO

abrir ↗

Referência

CVE-2018-18799

CVE-2018-18799—

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

23RISCO

abrir ↗

Referência

CVE-2018-18800

CVE-2018-18800—

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=

23RISCO

abrir ↗

Referência

CVE-2018-18800

CVE-2018-18800—

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=

23RISCO

abrir ↗

Referência

CVE-2018-18801

CVE-2018-18801—

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=

23RISCO

abrir ↗

Referência

CVE-2018-18801

CVE-2018-18801—

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id=

23RISCO

abrir ↗

Referência

CVE-2018-18803

CVE-2018-18803—

Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.vb

23RISCO

abrir ↗

Referência

CVE-2018-18805

CVE-2018-18805—

Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.