Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.367 exploits

Referência

CVE-2026-16082

CVE-2026-16082MEDIUM

Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou

33RISCO

abrir ↗

Referência

CVE-2026-16081

CVE-2026-16081MEDIUM

Sipeed PicoClaw auth.go cross-site request forgery

33RISCO

abrir ↗

Referência

CVE-2026-16077

CVE-2026-16077MEDIUM

AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

33RISCO

abrir ↗

Referência

CVE-2026-16076

CVE-2026-16076MEDIUM

AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

33RISCO

abrir ↗

Referência

CVE-2026-16075

CVE-2026-16075MEDIUM

AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

33RISCO

abrir ↗

Referência

CVE-2013-0807

CVE-2013-0807—

Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS

23RISCO

abrir ↗

Referência

CVE-2013-0928

CVE-2013-0928—

The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote

50RISCO

abrir ↗

Referência

CVE-2013-1080

CVE-2013-1080—

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a

60RISCO

abrir ↗

Referência

Drupal 11.x-dev - Full Path Disclosure

CVE-2024-45440MEDIUMwebappsphp

core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash

48RISCO

abrir ↗

Referência

CVE-2013-1347

CVE-2013-1347HIGHsob ataque

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit

100RISCO

abrir ↗

Referência

CVE-2018-5723

CVE-2018-5723—

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.

23RISCO

abrir ↗

Referência✓ VexDay Proof

32bit FTP (09.04.24) - 'Banner' Remote Buffer Overflow

CVE-2009-1592—remotewindows_x86

Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a

23RISCO

abrir ↗

Referência

CVE-2018-8734

CVE-2018-8734—

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

abrir ↗

Referência

CVE-2010-2343

CVE-2010-2343—

Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbi

50RISCO

abrir ↗

Referência

CVE-2016-0710

CVE-2016-0710—

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attacker

50RISCO

abrir ↗

Referência

CVE-2019-8953

CVE-2019-8953—

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, re

35RISCO

abrir ↗

Referência

CVE-2019-13272

CVE-2019-13272HIGHsob ataque

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

abrir ↗

Referência

CVE-2017-1000486

CVE-2017-1000486CRITICALsob ataque

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

100RISCO

abrir ↗

Referência

CVE-2015-1833

CVE-2015-1833—

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.

35RISCO

abrir ↗

Referência

CVE-2015-1833

CVE-2015-1833—

XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.

35RISCO

abrir ↗

Referência

CVE-2024-7314

CVE-2024-7314CRITICAL

anji-plus AJ-Report Authentication Bypass

75RISCO

abrir ↗

Referência

CVE-2024-7314

CVE-2024-7314CRITICAL

anji-plus AJ-Report Authentication Bypass

75RISCO

abrir ↗

Referência

CVE-2024-7314

CVE-2024-7314CRITICAL

anji-plus AJ-Report Authentication Bypass

75RISCO

abrir ↗

Referência

CVE-2017-8496

CVE-2017-8496—

Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of

35RISCO

abrir ↗

Referência

CVE-2024-53676

CVE-2024-53676CRITICAL

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution

60RISCO

abrir ↗

Referência

CVE-2010-4052

CVE-2010-4052—

Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3,

35RISCO

abrir ↗

Referência

CVE-2018-14933

CVE-2018-14933CRITICALsob ataque

upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir par

100RISCO

abrir ↗

Referência

CVE-2016-0015

CVE-2016-0015—

DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

35RISCO

abrir ↗

Referência

CVE-2022-0557

CVE-2022-0557HIGH

OS Command Injection in microweber/microweber

53RISCO

abrir ↗

Referência✓ VexDay Proof

Sorinara Streaming Audio Player 0.9 - '.pla' Local Stack Overflow

CVE-2009-1644—localwindows

Stack-based buffer overflow in Sorinara Streaming Audio Player 0.9 allows remote attackers to execute arbitrary code via

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.