Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2026-11485

CVE-2026-11485MEDIUM

SourceCodester Class and Exam Timetabling System archive2.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11480

CVE-2026-11480MEDIUM

Chengdu Everbrite Network Technology BeikeShop Admin Design Builder Endpoint admin.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11479

CVE-2026-11479LOW

yoanbernabeu grepai Qdrant Backend chunker.go weak hash

28RISCO

abrir ↗

Referência

CVE-2026-11478

CVE-2026-11478MEDIUM

kokke tiny-regex-c Pattern re.c matchstar redos

33RISCO

abrir ↗

Referência

CVE-2023-54351

CVE-2023-54351MEDIUM

WordPress Sonaar Music Plugin 4.7 Stored XSS via Comments

33RISCO

abrir ↗

Referência

CVE-2023-54350

CVE-2023-54350HIGH

WordPress Augmented-Reality Plugin Remote Code Execution Unauthenticated

41RISCO

abrir ↗

Referência

CVE-2022-50953

CVE-2022-50953MEDIUM

WordPress Plugin admin-word-count-column 2.2 Local File Read

33RISCO

abrir ↗

Referência

CVE-2021-47984

CVE-2021-47984MEDIUM

WordPress Plugin WP24 Domain Check 1.6.2 Stored XSS

33RISCO

abrir ↗

Referência

CVE-2026-10272

CVE-2026-10272MEDIUM

a4m4 Student-Management-System deleteform.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10271

CVE-2026-10271MEDIUM

a4m4 Student-Management-System Admin Endpoint admin redirect

33RISCO

abrir ↗

Referência

CVE-2026-10209

CVE-2026-10209MEDIUM

code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10208

CVE-2026-10208MEDIUM

code-projects Online Hospital Management System login_1.php login_user sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10206

CVE-2026-10206HIGH

D-Link DI-8400 dbsrv.asp stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10183

CVE-2026-10183HIGH

TRENDnet TEW-432BRP formWlanSetup stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10166

CVE-2026-10166MEDIUM

Edimax BR-6478AC POST Request formWlbasic command injection

33RISCO

abrir ↗

Referência

CVE-2026-10161

CVE-2026-10161HIGH

TRENDnet TEW-432BRP formResetStatistic stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2021-34369

CVE-2021-34369—

portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensiti

23RISCO

abrir ↗

Referência

CVE-2021-35323

CVE-2021-35323—

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

38RISCO

abrir ↗

Referência✓ VexDay Proof

Millewin 13.39.146.1 - Local Privilege Escalation

CVE-2021-3394—localwindows

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISCO

abrir ↗

Referência

CVE-2026-42626

CVE-2026-42626MEDIUM

HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetD

33RISCO

abrir ↗

Referência

CVE-2026-4929

CVE-2026-4929MEDIUM

Simple Hierarchical Select (Drupal 7) XSS in term-derived output

33RISCO

abrir ↗

Referência

CVE-2026-47102

CVE-2026-47102HIGH

LiteLLM < 1.83.10 Privilege Escalation via User Update

41RISCO

abrir ↗

Referência

CVE-2026-47102

CVE-2026-47102HIGH

LiteLLM < 1.83.10 Privilege Escalation via User Update

41RISCO

abrir ↗

Referência

CVE-2026-47101

CVE-2026-47101HIGH

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

41RISCO

abrir ↗

Referência

CVE-2026-47101

CVE-2026-47101HIGH

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

41RISCO

abrir ↗

Referência

CVE-2026-47101

CVE-2026-47101HIGH

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

41RISCO

abrir ↗

Referência

CVE-2020-37232

CVE-2020-37232HIGH

Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation

41RISCO

abrir ↗

Referência

CVE-2020-37231

CVE-2020-37231HIGH

Privacy Drive 3.17.0 Unquoted Service Path Privilege Escalation

41RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataque

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.