Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.401exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2016-20045

CVE-2016-20045HIGH

HNB Organizer 1.9.18-10 Local Buffer Overflow via -rc Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20044

CVE-2016-20044HIGH

PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20043

CVE-2016-20043HIGH

NRSS RSS Reader 0.3.9-1 Stack Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2016-20042

CVE-2016-20042HIGH

TRN 3.6-23 Stack Buffer Overflow Local Code Execution

41RISCO

abrir ↗

Referência

CVE-2016-20041

CVE-2016-20041HIGH

Yasr 0.6.9-5 Buffer Overflow via Command-line Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20040

CVE-2016-20040HIGH

TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

41RISCO

abrir ↗

Referência

CVE-2016-20039

CVE-2016-20039HIGH

Multi Emulator Super System 0.154-3.1 Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2016-20038

CVE-2016-20038HIGH

yTree 1.94-1.1 Stack-Based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2016-20037

CVE-2016-20037HIGH

xwpe 1.5.30a-2.1 Stack-based Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2026-4996

CVE-2026-4996MEDIUM

Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection

33RISCO

abrir ↗

Referência

CVE-2026-4995

CVE-2026-4995MEDIUM

wandb OpenUI Window Message Event index.html cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-4994

CVE-2026-4994MEDIUM

wandb OpenUI APIStatusError server.py generic_exception_handler information exposure

33RISCO

abrir ↗

Referência

CVE-2026-4993

CVE-2026-4993MEDIUM

wandb OpenUI config.py hard-coded credentials

33RISCO

abrir ↗

Referência

CVE-2025-15445

CVE-2025-15445MEDIUM

Restaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/Activation

33RISCO

abrir ↗

Referência

CVE-2026-9709

CVE-2026-9709HIGH

Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure

41RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2018-18777

CVE-2018-18777—

Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter subp

43RISCO

abrir ↗

Referência

CVE-2012-3810

CVE-2012-3810—

Samsung Kies before 2.5.0.12094_27_11 has registry modification.

23RISCO

abrir ↗

Referência

CVE-2018-18795

CVE-2018-18795—

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18795

CVE-2018-18795—

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18797

CVE-2018-18797—

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

23RISCO

abrir ↗

Referência

CVE-2018-18797

CVE-2018-18797—

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

23RISCO

abrir ↗

Referência

CVE-2018-18798

CVE-2018-18798—

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.ph

23RISCO

abrir ↗

Referência

CVE-2018-18798

CVE-2018-18798—

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.ph

23RISCO

abrir ↗

Referência✓ VexDay Proof

FrontAccounting 1.12 build 31 - Remote File Inclusion

CVE-2007-4279—webappsphp

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execut

45RISCO

abrir ↗

Referência

CVE-2018-19913

CVE-2018-19913—

DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.

23RISCO

abrir ↗

Referência

CVE-2018-20219

CVE-2018-20219—

An issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful authentication, the de

28RISCO

abrir ↗

Referência

CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

Referência

CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

Referência

CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.