Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2026-16244

CVE-2026-16244MEDIUM

itsourcecode Hospital Management System prescriptionorderreport.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2026-23696

CVE-2026-23696CRITICAL

Windmill < 1.603.3 File Ownership Handling SQLi RCE

68RISCO

abrir ↗

Referência

CVE-2026-23696

CVE-2026-23696CRITICAL

Windmill < 1.603.3 File Ownership Handling SQLi RCE

68RISCO

abrir ↗

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-33866

CVE-2026-33866MEDIUM

Authorization Bypass in MLflow AJAX Endpoint

33RISCO

abrir ↗

Referência

CVE-2026-33865

CVE-2026-33865MEDIUM

Stored XSS via unsafe YAML parsing in MLflow

33RISCO

abrir ↗

Referência

CVE-2026-22679

CVE-2026-22679CRITICAL

Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

53RISCO

abrir ↗

Referência

CVE-2018-25300

CVE-2018-25300HIGH

XATABoost CMS 1.0.0 SQL Injection via news.php

41RISCO

abrir ↗

Referência

CVE-2026-7392

CVE-2026-7392MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7391

CVE-2026-7391MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7390

CVE-2026-7390MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7389

CVE-2026-7389MEDIUM

EyouCMS common.php GetSortData sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7388

CVE-2026-7388MEDIUM

EyouCMS Template File FilemanagerLogic.php editFile code injection

33RISCO

abrir ↗

Referência

CVE-2018-17593

CVE-2018-17593—

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17593

CVE-2018-17593—

AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência

CVE-2018-17775

CVE-2018-17775—

Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local us

23RISCO

abrir ↗

Referência

CVE-2018-17776

CVE-2018-17776—

PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users

23RISCO

abrir ↗

Referência

CVE-2026-66749

CVE-2026-66749HIGH

Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup

41RISCO

abrir ↗

Referência✓ VexDay Proof

Sun Board 1.00.00 alpha - Remote File Inclusion

CVE-2007-3370—webappsphp

Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrar

45RISCO

abrir ↗

Referência

CVE-2026-66029

CVE-2026-66029MEDIUM

Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field

33RISCO

abrir ↗

Referência

CVE-2026-5659

CVE-2026-5659MEDIUM

pytries datrie trie File datrie.pyx Trie.__setstate__ deserialization

33RISCO

abrir ↗

Referência

CVE-2026-5650

CVE-2026-5650MEDIUM

code-projects Online Application System for Admission oas.sql sensitive information

33RISCO

abrir ↗

Referência

CVE-2026-5649

CVE-2026-5649MEDIUM

code-projects Online Application System for Admission Endpoint admsnform.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5648

CVE-2026-5648MEDIUM

code-projects Simple Laundry System Parameter userfinishregister.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5647

CVE-2026-5647MEDIUM

code-projects Online Shoe Store Add Product admin_feature.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5646

CVE-2026-5646MEDIUM

code-projects Easy Blog Site login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5645

CVE-2026-5645MEDIUM

projectworlds Car Rental System Parameter pay.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.