Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.620exploits catalogados

35.647CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentes populares risco

22.429 exploits

Referência

CVE-2026-10254

CVE-2026-10254MEDIUM

SourceCodester Pet Grooming Management Software admin file information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-10248

CVE-2026-10248MEDIUM

SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection

33RISCO

abrir ↗

Referência

CVE-2026-10247

CVE-2026-10247MEDIUM

SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10241

CVE-2026-10241MEDIUM

jeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-10240

CVE-2026-10240MEDIUM

JeecgBoot test server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2019-3842

CVE-2019-3842MEDIUM

In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using t

33RISCO

abrir ↗

Referência

CVE-2026-16489

CVE-2026-16489MEDIUM

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

33RISCO

abrir ↗

Referência

CVE-2026-64821

CVE-2026-64821MEDIUM

djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

33RISCO

abrir ↗

Referência

CVE-2026-16447

CVE-2026-16447MEDIUM

D-Link DNS-320 multi_uploadify.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-14184

CVE-2026-14184MEDIUM

Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-14183

CVE-2026-14183MEDIUM

Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-9833

CVE-2026-9833HIGH

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-11349

CVE-2026-11349HIGH

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RISCO

abrir ↗

Referência

CVE-2026-10755

CVE-2026-10755LOW

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

28RISCO

abrir ↗

Referência

CVE-2026-10081

CVE-2026-10081HIGH

Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

41RISCO

abrir ↗

Referência

CVE-2026-16155

CVE-2026-16155MEDIUM

SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-16154

CVE-2026-16154MEDIUM

SourceCodester Class and Exam Timetabling System edit_room1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16152

CVE-2026-16152MEDIUM

SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16133

CVE-2026-16133LOW

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

28RISCO

abrir ↗

Referência

CVE-2026-16131

CVE-2026-16131MEDIUM

itsourcecode Hospital Management System prescriptionrecord.php sql injection

33RISCO

abrir ↗

Referência

CVE-2019-3978

CVE-2019-3978—

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queri

28RISCO

abrir ↗

Referência

CVE-2026-10126

CVE-2026-10126HIGH

Edimax BR-6478AC POST Request formQoS buffer overflow

41RISCO

abrir ↗

Referência

CVE-2018-25424

CVE-2018-25424HIGH

Gate Pass Management System 2.1 SQL Injection via login-exec.php

41RISCO

abrir ↗

Referência

CVE-2018-25423

CVE-2018-25423MEDIUM

Arm Whois 3.11 Denial of Service via Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25418

CVE-2018-25418HIGH

AiOPMSD Final 1.0.0 SQL Injection via year.php

41RISCO

abrir ↗

Referência

CVE-2018-25413

CVE-2018-25413HIGH

AiOPMSD Final 1.0.0 SQL Injection via search.php

41RISCO

abrir ↗

Referência

CVE-2018-25412

CVE-2018-25412CRITICAL

Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php

48RISCO

abrir ↗

Referência

CVE-2018-25411

CVE-2018-25411HIGH

MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php

41RISCO

abrir ↗

Referência

CVE-2019-4716

CVE-2019-4716CRITICALsob ataque

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated use

100RISCO

abrir ↗

Referência

CVE-2018-25383

CVE-2018-25383HIGH

Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.