Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2026-15958

CVE-2026-15958CRITICAL

Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

48RISCO

abrir ↗

Referência

CVE-2026-16536

CVE-2026-16536MEDIUM

Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id

33RISCO

abrir ↗

Referência

CVE-2026-16623

CVE-2026-16623HIGH

Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)

41RISCO

abrir ↗

Referência

CVE-2026-16618

CVE-2026-16618CRITICAL

ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

48RISCO

abrir ↗

Referência

CVE-2026-18720

CVE-2026-18720MEDIUM

kalcaddle kodbox msgWarning Plugin action improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-18686

CVE-2026-18686CRITICAL

GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

48RISCO

abrir ↗

Referência

CVE-2026-15260

CVE-2026-15260MEDIUM

Geo My WP < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-15231

CVE-2026-15231LOW

TaxoPress < 3.51.0 - Contributor+ Private Post Disclosure via IDOR

28RISCO

abrir ↗

Referência

CVE-2026-12175

CVE-2026-12175MEDIUM

CodeAstro Student Attendance Management System createStudents.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-48558

CVE-2026-48558CRITICAL

SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification

53RISCO

abrir ↗

Referência

CVE-2016-7089

CVE-2016-7089—

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco

23RISCO

abrir ↗

Referência

CVE-2026-11502

CVE-2026-11502LOW

JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect

28RISCO

abrir ↗

Referência

CVE-2026-11501

CVE-2026-11501MEDIUM

SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection

33RISCO

abrir ↗

Referência

CVE-2014-4033

CVE-2014-4033—

Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows

23RISCO

abrir ↗

Referência

CVE-2026-11337

CVE-2026-11337MEDIUM

tittuvarghese CollegeManagementSystem fetch.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5655

CVE-2026-5655MEDIUM

Use After Free in Wireshark

33RISCO

abrir ↗

Referência

CVE-2016-7216

CVE-2016-7216—

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permissi

23RISCO

abrir ↗

Referência✓ VexDay Proof

Linksys SPA941 - Remote Reboot (Denial of Service)

CVE-2007-2270—doshardware

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) cha

23RISCO

abrir ↗

Referência

CVE-2016-7226

CVE-2016-7226—

Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to

23RISCO

abrir ↗

Referência

CVE-2026-11335

CVE-2026-11335MEDIUM

tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation

33RISCO

abrir ↗

Referência

CVE-2026-7686

CVE-2026-7686MEDIUM

eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control

33RISCO

abrir ↗

Referência

CVE-2026-7685

CVE-2026-7685HIGH

Edimax BR-6208AC setWAN buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7684

CVE-2026-7684HIGH

Edimax BR-6428nC setWAN buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7681

CVE-2026-7681MEDIUM

jsbroks COCO Annotator Dataset API datasets.py authorization

33RISCO

abrir ↗

Referência

CVE-2026-7680

CVE-2026-7680MEDIUM

jsbroks COCO Annotator Data Endpoint datasets.py path traversal

33RISCO

abrir ↗

Referência

CVE-2026-10185

CVE-2026-10185MEDIUM

SourceCodester Hospitals Patient Records Management System Users.php save sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure

CVE-2007-2271—webappsphp

Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arbi

23RISCO

abrir ↗

Referência

CVE-2026-10169

CVE-2026-10169MEDIUM

OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery

33RISCO

abrir ↗

Referência

CVE-2026-7398

CVE-2026-7398MEDIUM

florensiawidjaja BioinfoMCP Upload Endpoint app.py upload path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7397

CVE-2026-7397MEDIUM

NousResearch hermes-agent file_tools.py _check_sensitive_path symlink

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.