Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência✓ VexDay Proof

NewzCrawler 1.8 - invalid string Remote Denial of Service

CVE-2007-2722—doswindows

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instabili

23RISCO

abrir ↗

Referência

CVE-2018-16763

CVE-2018-16763—

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca

60RISCO

abrir ↗

Referência

CVE-2026-41468

CVE-2026-41468CRITICAL

Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection

48RISCO

abrir ↗

Referência

CVE-2026-41469

CVE-2026-41469MEDIUM

Beghelli Sicuro24 SicuroWeb Missing Content Security Policy

33RISCO

abrir ↗

Referência

CVE-2026-6564

CVE-2026-6564MEDIUM

EMQ EMQX Enterprise Session Handling improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-41469

CVE-2026-41469MEDIUM

Beghelli Sicuro24 SicuroWeb Missing Content Security Policy

33RISCO

abrir ↗

Referência

CVE-2026-3254

CVE-2026-3254LOW

Improper Restriction of Rendered UI Layers or Frames in GitLab

28RISCO

abrir ↗

Referência

CVE-2026-6497

CVE-2026-6497MEDIUM

prasathmani TinyFileManager File Upload filemanager.php server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-6496

CVE-2026-6496MEDIUM

prasathmani TinyFileManager POST Parameter filemanager.php path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6493

CVE-2026-6493MEDIUM

lukevella rallly Reset Password reset-password-form.tsx cross site scripting

33RISCO

abrir ↗

Referência

CVE-2025-65135

CVE-2025-65135CRITICAL

In manikandan580 School-management-system 1.0, a time-based blind SQL injection vulnerability exists in /studentms/admin

48RISCO

abrir ↗

Referência

CVE-2026-6224

CVE-2026-6224MEDIUM

nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox

33RISCO

abrir ↗

Referência

CVE-2026-6220

CVE-2026-6220MEDIUM

HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-6219

CVE-2026-6219MEDIUM

aandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection

33RISCO

abrir ↗

Referência

CVE-2026-6218

CVE-2026-6218MEDIUM

aandrew-me ytDownloader Error Details Panel createTextNode cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6202

CVE-2026-6202MEDIUM

code-projects Easy Blog Site post.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6201

CVE-2026-6201MEDIUM

CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

33RISCO

abrir ↗

Referência

CVE-2026-6200

CVE-2026-6200HIGH

Tenda F456 webtypelibrary formwebtypelibrary stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-40043

CVE-2026-40043HIGH

Pachno 1.0.6 Authentication Bypass via runSwitchUser()

41RISCO

abrir ↗

Referência

CVE-2012-2576

CVE-2012-2576—

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Prof

50RISCO

abrir ↗

Referência

CVE-2026-4922

CVE-2026-4922HIGH

Cross-Site Request Forgery (CSRF) in GitLab

41RISCO

abrir ↗

Referência

CVE-2025-0186

CVE-2025-0186MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RISCO

abrir ↗

Referência

CVE-2010-5227

CVE-2010-5227—

Untrusted search path vulnerability in Opera before 10.62 allows local users to gain privileges via a Trojan horse dwmap

23RISCO

abrir ↗

Referência

CVE-2012-2580

CVE-2012-2580—

Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re

23RISCO

abrir ↗

Referência

CVE-2025-3922

CVE-2025-3922MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RISCO

abrir ↗

Referência

CVE-2025-6016

CVE-2025-6016MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RISCO

abrir ↗

Referência

CVE-2025-9957

CVE-2025-9957LOW

Incorrect Authorization in GitLab

28RISCO

abrir ↗

Referência

CVE-2026-1660

CVE-2026-1660MEDIUM

Allocation of Resources Without Limits or Throttling in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-5262

CVE-2026-5262HIGH

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

41RISCO

abrir ↗

Referência

CVE-2026-5377

CVE-2026-5377MEDIUM

Incorrect Authorization in GitLab

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.