Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2026-63767

CVE-2026-63767CRITICAL

ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

48RISCO

abrir ↗

Referência

CVE-2026-63768

CVE-2026-63768MEDIUM

cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State

33RISCO

abrir ↗

Referência

CVE-2026-9833

CVE-2026-9833HIGH

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-11349

CVE-2026-11349HIGH

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RISCO

abrir ↗

Referência

CVE-2026-10755

CVE-2026-10755LOW

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

28RISCO

abrir ↗

Referência

CVE-2026-10081

CVE-2026-10081HIGH

Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

41RISCO

abrir ↗

Referência

CVE-2026-16155

CVE-2026-16155MEDIUM

SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-16154

CVE-2026-16154MEDIUM

SourceCodester Class and Exam Timetabling System edit_room1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16152

CVE-2026-16152MEDIUM

SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16133

CVE-2026-16133LOW

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

28RISCO

abrir ↗

Referência

CVE-2026-16131

CVE-2026-16131MEDIUM

itsourcecode Hospital Management System prescriptionrecord.php sql injection

33RISCO

abrir ↗

Referência

CVE-2021-29440

CVE-2021-29440HIGH

Twig allowing dangerous PHP functions by default

53RISCO

abrir ↗

Referência

CVE-2026-15506

CVE-2026-15506HIGH

SecureAge CatchPulse Driver saappctl.sys heap-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-15506

CVE-2026-15506HIGH

SecureAge CatchPulse Driver saappctl.sys heap-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-15501

CVE-2026-15501MEDIUM

AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-15500

CVE-2026-15500MEDIUM

AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-15187

CVE-2026-15187MEDIUM

enquirer Public Package API Enquirer.set prototype pollution

33RISCO

abrir ↗

Referência

CVE-2026-59807

CVE-2026-59807HIGH

Composio SDK < 0.2.32-beta.283 - Sensitive File Upload via tool-file-uploads.ts

41RISCO

abrir ↗

Referência

CVE-2026-59804

CVE-2026-59804HIGH

Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket

41RISCO

abrir ↗

Referência

CVE-2026-59803

CVE-2026-59803HIGH

rpcx - Denial of Service via Gzip Decompression Bomb in Wire Protocol

41RISCO

abrir ↗

Referência

CVE-2026-34102

CVE-2026-34102CRITICAL

Guardian Language-System Unauthenticated SQL Injection via id Parameter in job_info_get.php

48RISCO

abrir ↗

Referência

CVE-2026-58454

CVE-2026-58454HIGH

JAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-13560

CVE-2026-13560MEDIUM

Edimax EW-7478APC POST Request formAccept os command injection

33RISCO

abrir ↗

Referência

CVE-2026-13558

CVE-2026-13558MEDIUM

CodeAstro Complaint Management System Report addreport cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-13557

CVE-2026-13557MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-13556

CVE-2026-13556MEDIUM

itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-13555

CVE-2026-13555MEDIUM

itsourcecode Online Hotel Management System controller.php add sql injection

33RISCO

abrir ↗

Referência

CVE-2026-54092

CVE-2026-54092MEDIUM

File Browser: DoS Vulnerability on Public Login API

33RISCO

abrir ↗

Referência

CVE-2026-53264

CVE-2026-53264HIGH

net/sched: act_api: use RCU with deferred freeing for action lifecycle

41RISCO

abrir ↗

Referência

CVE-2026-11486

CVE-2026-11486MEDIUM

SourceCodester Class and Exam Timetabling System archive1.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.