Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2026-11529

CVE-2026-11529MEDIUM

designcomputer mysql-mcp-server mysql URI server.py read_resource sql injection

33RISCO

abrir ↗

Referência

CVE-2020-14882

CVE-2020-14882CRITICALsob ataque

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

Referência

CVE-2026-10232

CVE-2026-10232MEDIUM

Assimp ASE File scene.cpp ~aiNode use after free

33RISCO

abrir ↗

Referência

CVE-2026-10231

CVE-2026-10231MEDIUM

Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-10229

CVE-2026-10229MEDIUM

Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-10228

CVE-2026-10228MEDIUM

raisulislamg4 student_management_system_by_php admission_form_check.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10227

CVE-2026-10227MEDIUM

raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10124

CVE-2026-10124HIGH

Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2020-20139

CVE-2020-20139—

Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table

23RISCO

abrir ↗

Referência

CVE-2020-20141

CVE-2020-20141—

Cross Site Scripting (XSS) vulnerability in the To OLAP (XMLA) component Under the Connect menu in Flexmonster Pivot Tab

23RISCO

abrir ↗

Referência

CVE-2020-2038

CVE-2020-2038HIGH

PAN-OS: OS command injection vulnerability in the management web interface

78RISCO

abrir ↗

Referência

CVE-2020-2096

CVE-2020-2096—

Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a ref

60RISCO

abrir ↗

Referência

CVE-2026-9631

CVE-2026-9631HIGH

UTT HiPER 1250GW Web Management formConfigFastDirectionW strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9628

CVE-2026-9628HIGH

UTT HiPER 1200GW Web Management formPptpClientConfig stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9609

CVE-2026-9609MEDIUM

QianFox FoxCMS Admin.php edit password recovery

33RISCO

abrir ↗

Referência

CVE-2026-9566

CVE-2026-9566MEDIUM

teableio teable Sign-up LoginPage.tsx cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9504

CVE-2026-9504MEDIUM

GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2020-23972

CVE-2020-23972—

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating

50RISCO

abrir ↗

Referência

CVE-2026-9409

CVE-2026-9409MEDIUM

Sushmi-pal Invoice-System User Management user improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9364

CVE-2026-9364MEDIUM

projectworlds Online Art Gallery Shop adminHome.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9360

CVE-2026-9360HIGH

Edimax EW-7438RPn POST Request formwlencrypt24g buffer overflow

41RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2020-28328

CVE-2020-28328—

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain

50RISCO

abrir ↗

Referência

CVE-2020-28351

CVE-2020-28351—

The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a r

43RISCO

abrir ↗

Referência

CVE-2020-3187

CVE-2020-3187CRITICAL

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

85RISCO

abrir ↗

Referência

CVE-2026-43634

CVE-2026-43634HIGH

HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

41RISCO

abrir ↗

Referência

CVE-2026-43633

CVE-2026-43633CRITICAL

HestiaCP 1.9.0-1.9.4 Deserialization RCE via Web Terminal

48RISCO

abrir ↗

Referência

CVE-2026-8785

CVE-2026-8785MEDIUM

projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8755

CVE-2026-8755MEDIUM

fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversal

33RISCO

abrir ↗

Referência

CVE-2026-8754

CVE-2026-8754MEDIUM

AstrBotDevs AstrBot File Upload chat.py post_file path traversal

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.