Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.295exploits catalogados

36.048CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.464VulnCheck XDB 8.813Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2016-20068

CVE-2016-20068HIGH

WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2019-25746

CVE-2019-25746HIGH

WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

41RISCO

abrir ↗

Referência

CVE-2026-12129

CVE-2026-12129MEDIUM

CodeAstro Human Resource Management System Dashboard add_tod cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-24067

CVE-2026-24067HIGH

Slate Digital Connect macOS XPC PID validation privilege escalation

41RISCO

abrir ↗

Referência

CVE-2025-71319

CVE-2025-71319HIGH

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

41RISCO

abrir ↗

Referência★ 14

watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520CRITICAL

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

85RISCO

abrir ↗

Referência

CVE-2026-65053

CVE-2026-65053MEDIUM

Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

33RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2026-78248

CVE-2026-78248MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78247

CVE-2026-78247MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78202

CVE-2026-78202MEDIUM

itsourcecode Payroll System admin_class.php save_settings unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-78201

CVE-2026-78201MEDIUM

itsourcecode Payroll System admin_class.php login sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78200

CVE-2026-78200MEDIUM

itsourcecode Library Management System editbooks.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78199

CVE-2026-78199MEDIUM

SourceCodester Simple Online Food Ordering System view_prod.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7723

CVE-2026-7723MEDIUM

PrefectHQ prefect WebSocket Endpoint in missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-7722

CVE-2026-7722MEDIUM

PrefectHQ prefect Health Check API health endswith improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-7721

CVE-2026-7721MEDIUM

Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection

33RISCO

abrir ↗

Referência

CVE-2026-7720

CVE-2026-7720MEDIUM

Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection

33RISCO

abrir ↗

Referência

CVE-2026-7719

CVE-2026-7719CRITICAL

Totolink WA300 POST Request cstecgi.cgi loginauth buffer overflow

48RISCO

abrir ↗

Referência

CVE-2006-5190

CVE-2006-5190—

Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers t

23RISCO

abrir ↗

Referência

CVE-2026-7715

CVE-2026-7715MEDIUM

ravenwits mcp-server-arangodb MCP tools.ts arango_backup path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7600

CVE-2026-7600MEDIUM

ArtMin96 yii2-mcp-server MCP index.ts yii_execute_command os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7599

CVE-2026-7599MEDIUM

Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7597

CVE-2026-7597MEDIUM

mem0ai mem0 faiss.py pickle.dump deserialization

33RISCO

abrir ↗

Referência

CVE-2026-7596

CVE-2026-7596MEDIUM

nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7595

CVE-2026-7595MEDIUM

nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection

33RISCO

abrir ↗

Referência

CVE-2026-7594

CVE-2026-7594MEDIUM

Flux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7593

CVE-2026-7593MEDIUM

Sunwood-ai-labs command-executor-mcp-server MCP index.ts execute_command os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7592

CVE-2026-7592MEDIUM

itsourcecode Courier Management System edit_staff.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7591

CVE-2026-7591MEDIUM

TimBroddin astro-mcp-server MCP Tool Query Construction index.ts sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.