Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.056exploits catalogados

35.925CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentes populares risco

22.640 exploits

Referência

CVE-2015-6923

CVE-2015-6923—

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary phy

23RISCO

abrir ↗

Referência

CVE-2012-1466

CVE-2012-1466—

The Traffic Grapher Server for NetMechanica NetDecision before 4.6.1 allows remote attackers to obtain the source code o

23RISCO

abrir ↗

Referência

CVE-2026-70637

CVE-2026-70637HIGH

LightFTP 2.4 Data Race Condition via ABOR Command in ftpserv.c

41RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.2.4 - Remote Code Execution

CVE-2012-1495—webappsphp

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RISCO

abrir ↗

Referência

jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities

CVE-2012-1500—webappsjsp

Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject

23RISCO

abrir ↗

Referência

CVE-2010-0373

CVE-2010-0373—

SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2012-1503

CVE-2012-1503—

Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote a

23RISCO

abrir ↗

Referência

CVE-2026-19019

CVE-2026-19019MEDIUM

poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

33RISCO

abrir ↗

Referência

CVE-2026-19019

CVE-2026-19019MEDIUM

poco-ai poco-agent Claude File workspace.py WorkspaceManager._setup_session_persistence cleanup

33RISCO

abrir ↗

Referência

CVE-2026-19011

CVE-2026-19011MEDIUM

TinyAGI agents.ts buildSystemPrompt file inclusion

33RISCO

abrir ↗

Referência

CVE-2026-19010

CVE-2026-19010MEDIUM

TinyAGI Message API Endpoint index.ts processMessage authorization

33RISCO

abrir ↗

Referência

CVE-2012-1900

CVE-2012-1900—

Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2012-1900

CVE-2012-1900—

Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-67617

CVE-2026-67617MEDIUM

Microweber CMS 2.0.20 Stored XSS via tag_names Parameter

33RISCO

abrir ↗

Referência

CVE-2026-18602

CVE-2026-18602CRITICAL

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

48RISCO

abrir ↗

Referência

CVE-2026-67609

CVE-2026-67609HIGH

Telenia TVox 26.5.3 Privilege Escalation via Insecure sudoers Configuration

41RISCO

abrir ↗

Referência

CVE-2022-35914

CVE-2022-35914CRITICALsob ataque

/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

100RISCO

abrir ↗

Referência

CVE-2009-5093

CVE-2009-5093—

Directory traversal vulnerability in gastbuch.php in Gästebuch (Gastebuch) 1.6 allows remote attackers to read arbitrary

23RISCO

abrir ↗

Referência

CVE-2026-15209

CVE-2026-15209MEDIUM

JS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOR

33RISCO

abrir ↗

Referência✓ VexDay Proof

PMOS Help Desk 2.4 - Remote Command Execution

CVE-2007-6550—webappsphp

form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote at

23RISCO

abrir ↗

Referência

CVE-2009-5134

CVE-2009-5134—

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Office 2003 - '.wps' Local Stack Overflow (MS08-011)

CVE-2008-0108—localwindows

Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Wor

35RISCO

abrir ↗

Referência

CVE-2010-1060

CVE-2010-1060—

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabl

23RISCO

abrir ↗

Referência

CVE-2012-2580

CVE-2012-2580—

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re

23RISCO

abrir ↗

Referência

CVE-2012-2583

CVE-2012-2583—

Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-61511

CVE-2026-61511CRITICAL

vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

75RISCO

abrir ↗

Referência

CVE-2012-2584

CVE-2012-2584—

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr

23RISCO

abrir ↗

Referência

CVE-2026-14189

CVE-2026-14189LOW

WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields

28RISCO

abrir ↗

Referência

CVE-2012-2591

CVE-2012-2591—

Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack

23RISCO

abrir ↗

Referência

CVE-2025-71408

CVE-2025-71408HIGH

NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.