Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.430exploits catalogados

35.543CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.367GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.283Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2026-10693

CVE-2026-10693MEDIUM

SourceCodester Online Boat Reservation System Administrative Endpoint improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10661

CVE-2026-10661MEDIUM

ahujasid blender-mcp server.py open injection

33RISCO

abrir ↗

Referência

CVE-2026-10650

CVE-2026-10650MEDIUM

warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption

33RISCO

abrir ↗

Referência

CVE-2026-10650

CVE-2026-10650MEDIUM

warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption

33RISCO

abrir ↗

Referência

CVE-2026-10624

CVE-2026-10624MEDIUM

SourceCodester Human Resource Management Employee View detailview.php resource injection

33RISCO

abrir ↗

Referência

CVE-2026-10619

CVE-2026-10619MEDIUM

sayan365 student-management-system improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10190

CVE-2026-10190HIGH

Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service

41RISCO

abrir ↗

Referência

CVE-2026-10187

CVE-2026-10187CRITICAL

Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-10186

CVE-2026-10186MEDIUM

code-projects Online Hospital Management System patient.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-25389

CVE-2018-25389HIGH

HaPe PKH 1.1 SQL Injection via nama_kelompok Parameter

41RISCO

abrir ↗

Referência

CVE-2026-9477

CVE-2026-9477CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setAccessDeviceCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9476

CVE-2026-9476CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setPasswordCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9465

CVE-2026-9465MEDIUM

Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection

33RISCO

abrir ↗

Referência

CVE-2018-25380

CVE-2018-25380HIGH

Joomla Component eXtroForms 2.1.5 SQL Injection via filter parameters

41RISCO

abrir ↗

Referência

CVE-2018-25378

CVE-2018-25378MEDIUM

Notebook Pro 2.0 Denial of Service via Notebook Name Field

33RISCO

abrir ↗

Referência

CVE-2018-25377

CVE-2018-25377HIGH

Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-25375

CVE-2018-25375HIGH

SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-25374

CVE-2018-25374HIGH

Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal

41RISCO

abrir ↗

Referência

CVE-2018-25373

CVE-2018-25373HIGH

DVD Photo Slideshow Professional 8.07 Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-25372

CVE-2018-25372HIGH

MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

41RISCO

abrir ↗

Referência

CVE-2018-25371

CVE-2018-25371HIGH

mooSocial Store Plugin 2.6 SQL Injection via product parameter

41RISCO

abrir ↗

Referência

CVE-2018-25370

CVE-2018-25370MEDIUM

Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php

33RISCO

abrir ↗

Referência

CVE-2018-25369

CVE-2018-25369MEDIUM

Visual Ping 0.8.0.0 Buffer Overflow Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25368

CVE-2018-25368HIGH

Nord VPN 6.14.31 Denial of Service via Password Field

41RISCO

abrir ↗

Referência

CVE-2018-0972

CVE-2018-0972—

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

23RISCO

abrir ↗

Referência

GreenShot 1.2.10 - Insecure Deserialization Arbitrary Code Execution

CVE-2023-34634—localwindows

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green

38RISCO

abrir ↗

Referência

Wifi Soft Unibox Administration 3.0 & 3.1 - SQL Injection

CVE-2023-34635—webappsphp

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not vali

23RISCO

abrir ↗

Referência

CVE-2023-34635

CVE-2023-34635—

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not vali

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple QuickTime 7.2/7.3 (OSX/Windows) - RSTP Response Universal

CVE-2002-0252—remotemultiple

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a respon

28RISCO

abrir ↗

Referência

CVE-2018-13108

CVE-2018-13108—

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerabilit

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.