Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência

CVE-2026-47101

CVE-2026-47101HIGH

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

41RISCO

abrir ↗

Referência

CVE-2019-9162

CVE-2019-9162—

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient

23RISCO

abrir ↗

Referência

CVE-2019-9213

CVE-2019-9213—

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which make

38RISCO

abrir ↗

Referência

CVE-2019-9213

CVE-2019-9213—

In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which make

38RISCO

abrir ↗

Referência

CVE-2019-9491

CVE-2019-9491—

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to

28RISCO

abrir ↗

Referência✓ VexDay Proof

Millewin 13.39.146.1 - Local Privilege Escalation

CVE-2021-3394—localwindows

Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder per

23RISCO

abrir ↗

Referência

CVE-2026-9450

CVE-2026-9450MEDIUM

code-projects Employee Management System psubmit.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9449

CVE-2026-9449MEDIUM

code-projects Employee Management System changepassemp.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9448

CVE-2026-9448MEDIUM

code-projects Employee Management System applyleave.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9447

CVE-2026-9447MEDIUM

SourceCodester Simple POS and Inventory System search.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9446

CVE-2026-9446MEDIUM

SourceCodester Simple POS and Inventory System edit_customer.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9445

CVE-2026-9445MEDIUM

SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-9444

CVE-2026-9444MEDIUM

SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9443

CVE-2026-9443HIGH

Edimax BR-6478AC POST Request formL2TPSetup buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-9441

CVE-2026-9441MEDIUM

Edimax BR-6478AC POST Request formiNICbasic command injection

33RISCO

abrir ↗

Referência

CVE-2026-9437

CVE-2026-9437MEDIUM

DTStack Taier REST API Runtime.exec os command injection

33RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataqueransomware

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Referência

CVE-2021-4034

CVE-2021-4034HIGHsob ataqueransomware

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

Referência★ 40

crixpwn/CVE-2026-8389

CVE-2026-8389HIGH

JIT miscompilation in the JavaScript Engine: JIT component

41RISCO

abrir ↗

Referência

CVE-2022-50965

CVE-2022-50965MEDIUM

uBidAuction 2.0.1 posts manage Reflected XSS

33RISCO

abrir ↗

Referência

CVE-2022-50965

CVE-2022-50965MEDIUM

uBidAuction 2.0.1 posts manage Reflected XSS

33RISCO

abrir ↗

Referência

CVE-2026-8138

CVE-2026-8138HIGH

Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-8137

CVE-2026-8137HIGH

Totolink X5000R formDdns sub_458E40 buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-8136

CVE-2026-8136MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-8133

CVE-2026-8133MEDIUM

zyx0814 FilePress Shares Filelist API admin.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8132

CVE-2026-8132MEDIUM

CodeAstro Leave Management System login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8131

CVE-2026-8131MEDIUM

SourceCodester SUP Online Shopping replymsg.php sql injection

33RISCO

abrir ↗

Referência

CVE-2024-27686

CVE-2024-27686HIGH

Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (devic

41RISCO

abrir ↗

Referência

CVE-2026-14231

CVE-2026-14231MEDIUM

LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts

33RISCO

abrir ↗

Referência

CVE-2026-14207

CVE-2026-14207MEDIUM

LifterLMS < 10.0.10 - Instructor+ Stored XSS via Featured Pricing Information

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.