Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.533exploits catalogados

35.607CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência

CVE-2026-64828

CVE-2026-64828MEDIUM

Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field

33RISCO

abrir ↗

Referência

CVE-2026-16490

CVE-2026-16490MEDIUM

itsourcecode Hospital Management System prescription.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15752

CVE-2026-15752MEDIUM

zhinianboke xianyu-auto-reply Backend User Endpoint users authorization

33RISCO

abrir ↗

Referência

CVE-2026-15471

CVE-2026-15471MEDIUM

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-16073

CVE-2026-16073MEDIUM

AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-15470

CVE-2026-15470MEDIUM

Eleveo Call Recording Software group.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-12492

CVE-2026-12492CRITICAL

Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user

48RISCO

abrir ↗

Referência

CVE-2026-12395

CVE-2026-12395MEDIUM

WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter

33RISCO

abrir ↗

Referência

CVE-2020-3452

CVE-2020-3452HIGHsob ataque

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1999

CVE-2019-1999—

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to

23RISCO

abrir ↗

Referência

CVE-2019-2000

CVE-2019-2000—

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local

23RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência

CVE-2019-20215

CVE-2019-20215—

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the

60RISCO

abrir ↗

Referência

CVE-2019-20499

CVE-2019-20499—

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20499—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20501—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmwa

45RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2020-5752

CVE-2020-5752—

Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra

38RISCO

abrir ↗

Referência

CVE-2020-5791

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RISCO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHsob ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

Referência

CVE-2019-2725

CVE-2019-2725HIGHsob ataqueransomware

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

Referência

CVE-2026-8116

CVE-2026-8116MEDIUM

huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-8115

CVE-2026-8115MEDIUM

gyoridavid short-video-maker REST API rest.ts path traversal

33RISCO

abrir ↗

Referência

CVE-2026-8114

CVE-2026-8114MEDIUM

JeecgBoot JSON Object loadTreeData sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7844

CVE-2026-7844MEDIUM

chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-7834

CVE-2026-7834CRITICAL

EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-7833

CVE-2026-7833HIGH

EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.