Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2018-25292

CVE-2018-25292MEDIUM

Bome Restorator 1793 Denial of Service via Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25291

CVE-2018-25291MEDIUM

Project64 2.3.2 Denial of Service via Plugin Directory

33RISCO

abrir ↗

Referência

CVE-2018-25290

CVE-2018-25290MEDIUM

Easyboot 6.6.0 Buffer Overflow Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25289

CVE-2018-25289MEDIUM

Softdisk 3.0.3 Buffer Overflow Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25288

CVE-2018-25288MEDIUM

StyleWriter 1.0 Denial of Service via Pattern Input

33RISCO

abrir ↗

Referência

CVE-2026-5970

CVE-2026-5970MEDIUM

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

33RISCO

abrir ↗

Referência

CVE-2026-5962

CVE-2026-5962MEDIUM

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

33RISCO

abrir ↗

Referência

CVE-2026-5961

CVE-2026-5961MEDIUM

code-projects Simple IT Discussion Forum topic-details.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5960

CVE-2026-5960MEDIUM

code-projects Patient Record Management System SQL Database Backup File hcpms.sql information disclosure

33RISCO

abrir ↗

Referência

CVE-2016-20055

CVE-2016-20055HIGH

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

41RISCO

abrir ↗

Referência

CVE-2026-12582

CVE-2026-12582HIGH

Library Management System < 3.5.8 - Unauthenticated SQL Injection via book_id

41RISCO

abrir ↗

Referência

CVE-2026-15535

CVE-2026-15535MEDIUM

AkariAsai self-rag retrieval_lm index.py Indexer.deserialize_from deserialization

33RISCO

abrir ↗

Referência

CVE-2010-4838

CVE-2010-4838—

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users

23RISCO

abrir ↗

Referência

CVE-2026-15531

CVE-2026-15531MEDIUM

yashbhalgat HashNeRF-pytorch Checkpoint File run_nerf.py torch.load deserialization

33RISCO

abrir ↗

Referência

CVE-2026-15530

CVE-2026-15530MEDIUM

WuzhiCMS Attachment API index.php listimage information disclosure

33RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component com_jim 1.0.1 - Remote File Inclusion

CVE-2006-4242—webappsphp

PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote

23RISCO

abrir ↗

Referência

CVE-2014-2623

CVE-2014-2623—

Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown

60RISCO

abrir ↗

Referência

CVE-2014-2671

CVE-2014-2671—

Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corrupt

35RISCO

abrir ↗

Referência

CVE-2026-6574

CVE-2026-6574MEDIUM

osuuu LightPicture API Upload Endpoint lp.sql hard-coded credentials

33RISCO

abrir ↗

Referência

CVE-2026-6562

CVE-2026-6562MEDIUM

dameng100 muucmf index.html getListByPage sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6561

CVE-2026-6561MEDIUM

EyouCMS Index.php edit_adminlogo unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-6560

CVE-2026-6560HIGH

H3C Magic B0 aspForm Edit_BasicSSID buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-5811

CVE-2026-5811MEDIUM

SourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic error

33RISCO

abrir ↗

Referência

CVE-2026-5810

CVE-2026-5810MEDIUM

SourceCodester Sales and Inventory System GET Parameter delete.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5668

CVE-2026-5668MEDIUM

Cyber-III Student-Management-System add%20notice.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5611

CVE-2026-5611HIGH

Belkin F9K1015 formCrossBandSwitch stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5610

CVE-2026-5610HIGH

Belkin F9K1015 formWISP5G stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5609

CVE-2026-5609HIGH

Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5608

CVE-2026-5608HIGH

Belkin F9K1122 formWlanSetup stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5607

CVE-2026-5607MEDIUM

imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.