Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

21.581 exploits

Referência

CVE-2026-43891

CVE-2026-43891HIGH

changedetection.io: Arbitrary Local File Read via crafted backup restore

41RISCO

abrir ↗

Referência

CVE-2026-8346

CVE-2026-8346MEDIUM

D-Link DIR-816 portForward command injection

33RISCO

abrir ↗

Referência

CVE-2026-8345

CVE-2026-8345MEDIUM

D-Link DIR-816 singlePortForward sub_445E7C command injection

33RISCO

abrir ↗

Referência

CVE-2026-8344

CVE-2026-8344MEDIUM

D-Link DIR-816 formDMZ.cgi sub_445E7C command injection

33RISCO

abrir ↗

Referência

CVE-2026-43884

CVE-2026-43884HIGH

WWBN AVideo: SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()

41RISCO

abrir ↗

Referência

CVE-2026-8271

CVE-2026-8271MEDIUM

D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection

33RISCO

abrir ↗

Referência

CVE-2026-8270

CVE-2026-8270MEDIUM

Open5GS SMF ogs_nas_parse_qos_rules denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8269

CVE-2026-8269MEDIUM

Open5GS SMF smf_nsmf_handle_create_sm_context denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8268

CVE-2026-8268MEDIUM

Open5GS SMF OpenAPI_list_create denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8267

CVE-2026-8267MEDIUM

Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service

33RISCO

abrir ↗

Referência

CVE-2021-47936

CVE-2021-47936CRITICAL

OpenCATS 0.9.4 Remote Code Execution via Resume Upload

48RISCO

abrir ↗

Referência

CVE-2021-47927

CVE-2021-47927MEDIUM

WordPress Plugin WP Symposium Pro 2021.10 Stored XSS via wps_admin_forum_add_name

33RISCO

abrir ↗

Referência

CVE-2026-7788

CVE-2026-7788MEDIUM

Axle-Bucamp MCP-Docusaurus document.py get_content path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7780

CVE-2026-7780MEDIUM

Open5GS smf-registrations Endpoint udm-sm.c udm_state_operational denial of service

33RISCO

abrir ↗

Referência

CVE-2026-7779

CVE-2026-7779MEDIUM

Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of service

33RISCO

abrir ↗

Referência

CVE-2026-41927

CVE-2026-41927HIGH

WDR201A WiFi Extender Stack-Based Buffer Overflow via firewall.cgi

41RISCO

abrir ↗

Referência

CVE-2026-41926

CVE-2026-41926CRITICAL

WDR201A WiFi Extender OS Command Injection via firewall.cgi

48RISCO

abrir ↗

Referência

CVE-2026-41925

CVE-2026-41925CRITICAL

WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)

48RISCO

abrir ↗

Referência

CVE-2026-41924

CVE-2026-41924CRITICAL

WDR201A WiFi Extender OS Command Injection via makeRequest.cgi

48RISCO

abrir ↗

Referência

CVE-2026-41923

CVE-2026-41923CRITICAL

WDR201A WiFi Extender OS Command Injection via internet.cgi

48RISCO

abrir ↗

Referência

CVE-2026-41922

CVE-2026-41922CRITICAL

WDR201A WiFi Extender OS Command Injection via wireless.cgi

48RISCO

abrir ↗

Referência

CVE-2026-7743

CVE-2026-7743MEDIUM

CodeAstro Online Classroom studentdetails sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7742

CVE-2026-7742MEDIUM

CodeAstro Online Classroom facultylogin sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7712

CVE-2026-7712MEDIUM

MindsDB Pickle pickle.loads deserialization

33RISCO

abrir ↗

Referência

CVE-2026-7711

CVE-2026-7711MEDIUM

MindsDB Engine proc_wrapper.py exec unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-7710

CVE-2026-7710MEDIUM

YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-7709

CVE-2026-7709MEDIUM

janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7708

CVE-2026-7708MEDIUM

Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service

33RISCO

abrir ↗

Referência

CVE-2026-7700

CVE-2026-7700MEDIUM

langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-7698

CVE-2026-7698MEDIUM

Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.