Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-11528

CVE-2026-11528HIGH

Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-7694

CVE-2026-7694MEDIUM

Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7692

CVE-2026-7692MEDIUM

Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection

33RISCO

abrir ↗

Referência

CVE-2026-7691

CVE-2026-7691MEDIUM

Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection

33RISCO

abrir ↗

Referência

CVE-2026-7690

CVE-2026-7690MEDIUM

Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection

33RISCO

abrir ↗

Referência

CVE-2026-7689

CVE-2026-7689MEDIUM

Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification

33RISCO

abrir ↗

Referência

CVE-2026-7687

CVE-2026-7687MEDIUM

langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection

33RISCO

abrir ↗

Referência

CVE-2026-8764

CVE-2026-8764HIGH

H3C Magic B3 aspForm UpdateWanParams buffer overflow

41RISCO

abrir ↗

Referência

CVE-2020-37244

CVE-2020-37244HIGH

WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

41RISCO

abrir ↗

Referência

CVE-2020-37243

CVE-2020-37243HIGH

WordPress Plugin Supsystic Pricing Table 1.8.7 SQL Injection XSS

41RISCO

abrir ↗

Referência

CVE-2026-10809

CVE-2026-10809MEDIUM

itsourcecode Fees Management System manage_user.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7678

CVE-2026-7678MEDIUM

YunaiV yudao-cloud GoViewDataServiceImpl.java getDataBySQL sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7443

CVE-2026-7443MEDIUM

BurtTheCoder mcp-dnstwist MCP index.ts fuzz_domain os command injection

33RISCO

abrir ↗

Referência

CVE-2012-1465

CVE-2012-1465—

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause

43RISCO

abrir ↗

Referência

CVE-2026-7420

CVE-2026-7420HIGH

UTT HiPER 1250GW ConfigAdvideo strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7419

CVE-2026-7419HIGH

UTT HiPER 1250GW formTaskEdit_ap strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7418

CVE-2026-7418HIGH

UTT HiPER 1250GW NTP strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7417

CVE-2026-7417MEDIUM

Algovate xhs-mcp MCP mcp.server.ts xhs_publish_content server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-7416

CVE-2026-7416MEDIUM

PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7410

CVE-2026-7410MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7409

CVE-2026-7409MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6983

CVE-2026-6983MEDIUM

pagekit download server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2010-5195

CVE-2010-5195—

Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9

23RISCO

abrir ↗

Referência

CVE-2026-10177

CVE-2026-10177MEDIUM

Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-34414

CVE-2026-34414HIGH

Xerte Online Toolkits Path Traversal via connector.php

56RISCO

abrir ↗

Referência

CVE-2026-41459

CVE-2026-41459MEDIUM

Xerte Online Toolkits Path Disclosure via /setup

48RISCO

abrir ↗

Referência

CVE-2026-41468

CVE-2026-41468CRITICAL

Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection

48RISCO

abrir ↗

Referência

CVE-2016-7661

CVE-2016-7661—

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The is

23RISCO

abrir ↗

Referência

CVE-2018-25404

CVE-2018-25404HIGH

The Open ISES Project 3.30A SQL Injection via add_facnote.php

41RISCO

abrir ↗

Referência

CVE-2018-25396

CVE-2018-25396HIGH

Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm

41RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.