Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados

31.617CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8.069Nuclei 4.187Metasploit 3.462✓ só verificadosrecentes populares risco

19.791 exploits

Referência

CVE-2015-3306

CVE-2015-3306—

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

Referência

CVE-2015-3306

CVE-2015-3306—

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

Referência

CVE-2015-3306

CVE-2015-3306—

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

Referência

CVE-2015-3306

CVE-2015-3306—

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

Referência

CVE-2015-3306

CVE-2015-3306—

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

Referência

CVE-2016-7089

CVE-2016-7089—

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco

23RISCO

Referência

CVE-2012-0392

CVE-2012-0392—

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows

60RISCO

Referência

CVE-2026-7730

CVE-2026-7730MEDIUM

privsim mcp-test-runner MCP index.ts child_process.spawn os command injection

33RISCO

Referência

CVE-2026-7729

CVE-2026-7729MEDIUM

pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery

33RISCO

Referência

CVE-2026-7728

CVE-2026-7728MEDIUM

ryanjoachim mcp-rtfm MCP update_doc path traversal

33RISCO

Referência

CVE-2026-56115

CVE-2026-56115HIGH

Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization Bypass

41RISCO

Referência

CVE-2026-7725

CVE-2026-7725MEDIUM

PrefectHQ prefect GitRepository Pull storage.py argument injection

33RISCO

Referência

CVE-2026-7724

CVE-2026-7724LOW

PrefectHQ prefect Webhook/Notification validate_restricted_url toctou

28RISCO

Referência

CVE-2026-4110

CVE-2026-4110MEDIUM

Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list

33RISCO

Referência

CVE-2026-10530

CVE-2026-10530MEDIUM

Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token

33RISCO

Referência

CVE-2018-5189

CVE-2018-5189—

Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain syste

23RISCO

Referência

CVE-2026-7712

CVE-2026-7712MEDIUM

MindsDB Pickle pickle.loads deserialization

33RISCO

Referência

CVE-2026-7711

CVE-2026-7711MEDIUM

MindsDB Engine proc_wrapper.py exec unrestricted upload

33RISCO

Referência

CVE-2026-7709

CVE-2026-7709MEDIUM

janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

33RISCO

Referência

CVE-2026-7708

CVE-2026-7708MEDIUM

Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service

33RISCO

Referência

CVE-2019-25749

CVE-2019-25749HIGH

Joomla J-CruisePortal 6.0.4 SQL Injection via cruises

41RISCO

Referência

CVE-2026-7672

CVE-2026-7672MEDIUM

youlaitech youlai-boot Users Endpoint UserController.java getUserList sql injection

33RISCO

Referência

CVE-2026-7671

CVE-2026-7671MEDIUM

CodeWise Tornet Scooter Mobile App TwoFactor excessive authentication

33RISCO

Referência

CVE-2026-7669

CVE-2026-7669MEDIUM

sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

33RISCO

Referência

CVE-2026-7669

CVE-2026-7669MEDIUM

sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

33RISCO

Referência

CVE-2026-7668

CVE-2026-7668MEDIUM

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

33RISCO

Referência

CVE-2026-7653

CVE-2026-7653MEDIUM

r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection

33RISCO

Referência

CVE-2026-7645

CVE-2026-7645MEDIUM

ruvnet sublinear-time-solver MCP server.js export_state path traversal

33RISCO

Referência

CVE-2016-1611

CVE-2016-1611—

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.

23RISCO

Referência

CVE-2026-7384

CVE-2026-7384MEDIUM

ezequiroga mcp-bases research_server.py search_papers path traversal

33RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.