Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2018-25318

CVE-2018-25318CRITICAL

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25317

CVE-2018-25317CRITICAL

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25316

CVE-2018-25316CRITICAL

Tenda W308R v2 V5.07.48 Cookie Session Weakness DNS Change

48RISCO

abrir ↗

Referência

CVE-2018-25315

CVE-2018-25315HIGH

Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name

41RISCO

abrir ↗

Referência

CVE-2018-25314

CVE-2018-25314HIGH

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2018-25313

CVE-2018-25313MEDIUM

SysGauge 4.5.18 Local Denial of Service via Proxy Configuration

33RISCO

abrir ↗

Referência

CVE-2018-25304

CVE-2018-25304HIGH

Free Download Manager 2.0 Build 417 Local Buffer Overflow SEH

41RISCO

abrir ↗

Referência

CVE-2018-17587

CVE-2018-17587—

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17587

CVE-2018-17587—

AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2026-5585

CVE-2026-5585MEDIUM

Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-5584

CVE-2026-5584MEDIUM

Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

33RISCO

abrir ↗

Referência

CVE-2026-5583

CVE-2026-5583MEDIUM

PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5580

CVE-2026-5580MEDIUM

CodeAstro Online Classroom Parameter addvideos.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5579

CVE-2026-5579MEDIUM

CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5578

CVE-2026-5578MEDIUM

CodeAstro Online Classroom Parameter addassessment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5577

CVE-2026-5577MEDIUM

Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5576

CVE-2026-5576MEDIUM

SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-5575

CVE-2026-5575MEDIUM

SourceCodester/jkev Record Management System Login index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5984

CVE-2026-5984HIGH

D-Link DIR-605L POST Request formSetLog buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-5983

CVE-2026-5983HIGH

D-Link DIR-605L POST Request formSetDDNS buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-5982

CVE-2026-5982HIGH

D-Link DIR-605L POST Request formAdvNetwork buffer overflow

41RISCO

abrir ↗

Referência

CVE-2018-18763

CVE-2018-18763—

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

23RISCO

abrir ↗

Referência

CVE-2018-18772

CVE-2018-18772—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as dem

23RISCO

abrir ↗

Referência

CVE-2018-18772

CVE-2018-18772—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as dem

23RISCO

abrir ↗

Referência

CVE-2018-18773

CVE-2018-18773—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as demo

23RISCO

abrir ↗

Referência

CVE-2018-18774

CVE-2018-18774—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.

23RISCO

abrir ↗

Referência

CVE-2018-18774

CVE-2018-18774—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.

23RISCO

abrir ↗

Referência

CVE-2026-5182

CVE-2026-5182MEDIUM

SourceCodester Teacher Record System Parameter sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5181

CVE-2026-5181MEDIUM

SourceCodester Simple Doctors Appointment System ajax.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-5180

CVE-2026-5180MEDIUM

SourceCodester Simple Doctors Appointment System ajax.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.