Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência

CVE-2026-7812

CVE-2026-7812MEDIUM

54yyyu code-mcp MCP Tool server.py git_operation command injection

33RISCO

abrir ↗

Referência

CVE-2026-7811

CVE-2026-7811MEDIUM

54yyyu code-mcp MCP File server.py is_safe_path path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7741

CVE-2026-7741MEDIUM

CodeAstro Online Classroom studentlogin sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7725

CVE-2026-7725MEDIUM

PrefectHQ prefect GitRepository Pull storage.py argument injection

33RISCO

abrir ↗

Referência

CVE-2026-7724

CVE-2026-7724LOW

PrefectHQ prefect Webhook/Notification validate_restricted_url toctou

28RISCO

abrir ↗

Referência

CVE-2020-6519

CVE-2020-6519—

Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy

28RISCO

abrir ↗

Referência

CVE-2021-25155

CVE-2021-25155—

A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in v

28RISCO

abrir ↗

Referência

CVE-2026-13597

CVE-2026-13597CRITICAL

QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover

48RISCO

abrir ↗

Referência

CVE-2021-26084

CVE-2021-26084CRITICALsob ataqueransomware

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un

100RISCO

abrir ↗

Referência

CVE-2026-16489

CVE-2026-16489MEDIUM

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

33RISCO

abrir ↗

Referência

CVE-2026-64821

CVE-2026-64821MEDIUM

djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

33RISCO

abrir ↗

Referência

CVE-2026-64822

CVE-2026-64822MEDIUM

djangoSIGE 1.10 User Enumeration via ForgotPasswordView

33RISCO

abrir ↗

Referência

CVE-2026-16447

CVE-2026-16447MEDIUM

D-Link DNS-320 multi_uploadify.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-14184

CVE-2026-14184MEDIUM

Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-14183

CVE-2026-14183MEDIUM

Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-13694

CVE-2026-13694MEDIUM

Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass

33RISCO

abrir ↗

Referência

CVE-2026-13693

CVE-2026-13693MEDIUM

Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal

33RISCO

abrir ↗

Referência

CVE-2026-11767

CVE-2026-11767HIGH

CRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact Form

41RISCO

abrir ↗

Referência

CVE-2026-16329

CVE-2026-16329MEDIUM

D-Link DNS-320 uploadify.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-63767

CVE-2026-63767CRITICAL

ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

48RISCO

abrir ↗

Referência

CVE-2026-63768

CVE-2026-63768MEDIUM

cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State

33RISCO

abrir ↗

Referência

CVE-2026-9833

CVE-2026-9833HIGH

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-11349

CVE-2026-11349HIGH

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RISCO

abrir ↗

Referência

CVE-2026-10755

CVE-2026-10755LOW

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

28RISCO

abrir ↗

Referência

CVE-2026-10081

CVE-2026-10081HIGH

Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

41RISCO

abrir ↗

Referência

CVE-2026-16155

CVE-2026-16155MEDIUM

SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-16154

CVE-2026-16154MEDIUM

SourceCodester Class and Exam Timetabling System edit_room1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16152

CVE-2026-16152MEDIUM

SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16133

CVE-2026-16133LOW

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

28RISCO

abrir ↗

Referência

CVE-2026-16131

CVE-2026-16131MEDIUM

itsourcecode Hospital Management System prescriptionrecord.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.