Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.407 exploits

Referência

CVE-2026-18997

CVE-2026-18997MEDIUM

cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization

33RISCO

abrir ↗

Referência

CVE-2026-18996

CVE-2026-18996MEDIUM

cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment

33RISCO

abrir ↗

Referência

CVE-2026-18995

CVE-2026-18995MEDIUM

netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-18993

CVE-2026-18993MEDIUM

NousResearch hermes-agent Memory Toolset model_tools.py access control

33RISCO

abrir ↗

Referência

CVE-2026-18992

CVE-2026-18992MEDIUM

zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

33RISCO

abrir ↗

Referência

CVE-2026-13514

CVE-2026-13514LOW

Chess Play and Learn App com.chess AndroidManifest.xml backup

28RISCO

abrir ↗

Referência

CVE-2026-13513

CVE-2026-13513LOW

MyScale MyScaleDB SegmentId.h getCacheKey data authenticity

28RISCO

abrir ↗

Referência

CVE-2026-13512

CVE-2026-13512MEDIUM

Databend Tenant client_session_manager.rs state_key authorization

33RISCO

abrir ↗

Referência

CVE-2019-17558

CVE-2019-17558HIGHsob ataque

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

100RISCO

abrir ↗

Referência

CVE-2026-57518

CVE-2026-57518HIGH

Pagekit CMS 1.0.18 Privilege Escalation via UserApiController

41RISCO

abrir ↗

Referência

CVE-2026-45257

CVE-2026-45257HIGH

Arbitrary file overwrite via the KTLS receive path

41RISCO

abrir ↗

Referência

CVE-2026-36908

CVE-2026-36908MEDIUM

A stack overflow in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8

33RISCO

abrir ↗

Referência

CVE-2026-10753

CVE-2026-10753LOW

Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update

28RISCO

abrir ↗

Referência

CVE-2026-18607

CVE-2026-18607HIGH

Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-18606

CVE-2026-18606HIGH

Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

41RISCO

abrir ↗

Referência

CVE-2026-67612

CVE-2026-67612MEDIUM

OpenEMR 8.2.0 Stored XSS via import_template.php Template Management

33RISCO

abrir ↗

Referência

CVE-2020-3452

CVE-2020-3452HIGHsob ataque

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability

100RISCO

abrir ↗

Referência

CVE-2019-1999

CVE-2019-1999—

In binder_alloc_free_page of binder_alloc.c, there is a possible double free due to improper locking. This could lead to

23RISCO

abrir ↗

Referência

CVE-2019-2000

CVE-2019-2000—

In several functions of binder.c, there is possible memory corruption due to a use after free. This could lead to local

23RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência

CVE-2019-20085

CVE-2019-20085HIGHsob ataque

TVT NVMS-1000 devices allow GET /.. Directory Traversal

100RISCO

abrir ↗

Referência

CVE-2019-20215

CVE-2019-20215—

D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the

60RISCO

abrir ↗

Referência

CVE-2019-20499

CVE-2019-20499—

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20499—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20501—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmwa

45RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2019-2215

CVE-2019-2215HIGHsob ataque

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

98RISCO

abrir ↗

Referência

CVE-2019-3475

CVE-2019-3475HIGH

Local privilege escalation in Filr famtd

41RISCO

abrir ↗

Referência

CVE-2026-11518

CVE-2026-11518MEDIUM

SourceCodester Inventory System User Management users.php cross site scripting

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.