Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados

35.276CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentes populares risco

22.166 exploits

Referência

CVE-2026-9424

CVE-2026-9424MEDIUM

Edimax EW-7438RPn Content-Type formWlanMP os command injection

33RISCO

abrir ↗

Referência

CVE-2026-9423

CVE-2026-9423MEDIUM

Edimax BR-6675nD POST Request mp command injection

33RISCO

abrir ↗

Referência

CVE-2026-9419

CVE-2026-9419MEDIUM

code-projects Employee Management System empproject.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9418

CVE-2026-9418MEDIUM

code-projects Employee Management System changepassemp.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9404

CVE-2026-9404CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setDdnsCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9403

CVE-2026-9403HIGH

Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow

41RISCO

abrir ↗

Referência

CVE-2021-47955

CVE-2021-47955MEDIUM

CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload

33RISCO

abrir ↗

Referência

CVE-2021-47954

CVE-2021-47954HIGH

LayerBB 1.1.4 SQL Injection via search_query Parameter

41RISCO

abrir ↗

Referência

CVE-2020-37228

CVE-2020-37228CRITICAL

iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

48RISCO

abrir ↗

Referência

CVE-2020-37227

CVE-2020-37227HIGH

WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload

41RISCO

abrir ↗

Referência

CVE-2022-45899

CVE-2022-45899MEDIUM

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as

33RISCO

abrir ↗

Referência

CVE-2024-33724

CVE-2024-33724MEDIUM

SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.

48RISCO

abrir ↗

Referência

CVE-2026-7709

CVE-2026-7709MEDIUM

janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7708

CVE-2026-7708MEDIUM

Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service

33RISCO

abrir ↗

Referência

CVE-2026-7700

CVE-2026-7700MEDIUM

langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-7698

CVE-2026-7698MEDIUM

Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7697

CVE-2026-7697MEDIUM

AMTT Hotel Broadband Operation System cardhand_submit.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7696

CVE-2026-7696MEDIUM

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5Files unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-7695

CVE-2026-7695MEDIUM

Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMinAvgValue sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14919

CVE-2026-14919CRITICAL

ShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email Reroute

48RISCO

abrir ↗

Referência

CVE-2026-14862

CVE-2026-14862LOW

Support Genix Lite < 1.4.48 - Unauthenticated Ticket Attachment Download via Missing Authorization

28RISCO

abrir ↗

Referência

CVE-2026-14799

CVE-2026-14799MEDIUM

CodeAstro Ecommerce Website my_account.php sql injection

33RISCO

abrir ↗

Referência

CVE-2025-14562

CVE-2025-14562LOW

Incorrect Authorization in GitLab

28RISCO

abrir ↗

Referência

CVE-2026-3093

CVE-2026-3093MEDIUM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-4672

CVE-2026-4672MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-6267

CVE-2026-6267HIGH

Insertion of Sensitive Information Into Sent Data in GitLab

41RISCO

abrir ↗

Referência

CVE-2026-6336

CVE-2026-6336MEDIUM

Incorrect Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-12436

CVE-2026-12436HIGH

Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab

41RISCO

abrir ↗

Referência

CVE-2026-14341

CVE-2026-14341MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-14351

CVE-2026-14351MEDIUM

Exposure of Sensitive Information Through Metadata in GitLab

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.