Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência

CVE-2026-15536

CVE-2026-15536MEDIUM

itsourcecode Hospital Management System patviewprescription.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-15533

CVE-2026-15533MEDIUM

DedeCMS Column Management search.php code injection

33RISCO

abrir ↗

Referência

CVE-2026-15532

CVE-2026-15532MEDIUM

SourceCodester Online Book Store System User Management cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-15511

CVE-2026-15511CRITICAL

Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection

48RISCO

abrir ↗

Referência

CVE-2026-15508

CVE-2026-15508MEDIUM

Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-15507

CVE-2026-15507MEDIUM

coollabsio Coolify Policy Policies authorization

33RISCO

abrir ↗

Referência

CVE-2026-19000

CVE-2026-19000MEDIUM

JeecgBoot Anonymous Chat Attachment send server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-18998

CVE-2026-18998MEDIUM

cosmicstack-labs mercury-agent delegate_task Tool sub-agent.ts SubAgent.run improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-18997

CVE-2026-18997MEDIUM

cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization

33RISCO

abrir ↗

Referência

CVE-2026-18996

CVE-2026-18996MEDIUM

cosmicstack-labs mercury-agent run_command permissions.ts PermissionManager.checkShellCommand privileges assignment

33RISCO

abrir ↗

Referência

CVE-2026-18995

CVE-2026-18995MEDIUM

netease-youdao LobsterAI MEDIA Path artifactParser.ts parseMediaTokensFromText information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-18993

CVE-2026-18993MEDIUM

NousResearch hermes-agent Memory Toolset model_tools.py access control

33RISCO

abrir ↗

Referência

CVE-2026-18992

CVE-2026-18992MEDIUM

zhayujie CowAgent Self-Evolution Review Agent executor.py _select_tools authorization

33RISCO

abrir ↗

Referência

CVE-2026-13514

CVE-2026-13514LOW

Chess Play and Learn App com.chess AndroidManifest.xml backup

28RISCO

abrir ↗

Referência

CVE-2026-13513

CVE-2026-13513LOW

MyScale MyScaleDB SegmentId.h getCacheKey data authenticity

28RISCO

abrir ↗

Referência

CVE-2026-13512

CVE-2026-13512MEDIUM

Databend Tenant client_session_manager.rs state_key authorization

33RISCO

abrir ↗

Referência

CVE-2019-17558

CVE-2019-17558HIGHsob ataque

Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V

100RISCO

abrir ↗

Referência

CVE-2026-57518

CVE-2026-57518HIGH

Pagekit CMS 1.0.18 Privilege Escalation via UserApiController

41RISCO

abrir ↗

Referência

CVE-2026-45257

CVE-2026-45257HIGH

Arbitrary file overwrite via the KTLS receive path

41RISCO

abrir ↗

Referência

CVE-2026-36908

CVE-2026-36908MEDIUM

A stack overflow in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8

33RISCO

abrir ↗

Referência

CVE-2026-10753

CVE-2026-10753LOW

Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update

28RISCO

abrir ↗

Referência

CVE-2026-18607

CVE-2026-18607HIGH

Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-18606

CVE-2026-18606HIGH

Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

41RISCO

abrir ↗

Referência

CVE-2026-67612

CVE-2026-67612MEDIUM

OpenEMR 8.2.0 Stored XSS via import_template.php Template Management

33RISCO

abrir ↗

Referência

CVE-2026-10124

CVE-2026-10124HIGH

Shibby Tomato Zserv ripd rip_zebra_read_ipv4 stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2019-19726

CVE-2019-19726—

OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be

38RISCO

abrir ↗

Referência

CVE-2026-9631

CVE-2026-9631HIGH

UTT HiPER 1250GW Web Management formConfigFastDirectionW strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9628

CVE-2026-9628HIGH

UTT HiPER 1200GW Web Management formPptpClientConfig stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9609

CVE-2026-9609MEDIUM

QianFox FoxCMS Admin.php edit password recovery

33RISCO

abrir ↗

Referência

CVE-2026-9566

CVE-2026-9566MEDIUM

teableio teable Sign-up LoginPage.tsx cross site scripting

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.