Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-15481

CVE-2026-15481HIGH

Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection

41RISCO

abrir ↗

Referência

CVE-2026-15480

CVE-2026-15480HIGH

Trendnet TEW-635BRM Web Service rc start_httpd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2021-34110

CVE-2021-34110—

WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executa

23RISCO

abrir ↗

Referência

CVE-2010-5056

CVE-2010-5056—

SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2018-14575

CVE-2018-14575—

Trash Bin plugin 1.1.3 for MyBB has cross-site scripting (XSS) via a thread subject and a cross-site request forgery (CS

23RISCO

abrir ↗

Referência✓ VexDay Proof

Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion

CVE-2006-4452—webappsphp

PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regis

23RISCO

abrir ↗

Referência✓ VexDay Proof

XChat 2.6.7 (Windows) - Remote Denial of Service

CVE-2006-4455—doswindows

Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via un

23RISCO

abrir ↗

Referência

CVE-2026-14557

CVE-2026-14557CRITICAL

SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass

48RISCO

abrir ↗

Referência

CVE-2026-15270

CVE-2026-15270HIGH

D-link DIR-823G Web boa.conf least privilege violation

41RISCO

abrir ↗

Referência

CVE-2026-60105

CVE-2026-60105HIGH

Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass

41RISCO

abrir ↗

Referência

CVE-2026-10834

CVE-2026-10834MEDIUM

WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image

33RISCO

abrir ↗

Referência

CVE-2014-3974

CVE-2014-3974—

Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2026-12065

CVE-2026-12065LOW

Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme

28RISCO

abrir ↗

Referência

CVE-2017-20250

CVE-2017-20250HIGH

WordPress Plugin Mac Photo Gallery 3.0 Arbitrary File Download

41RISCO

abrir ↗

Referência

CVE-2010-5062

CVE-2010-5062—

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-5062

CVE-2010-5062—

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution

CVE-2006-4458—webappsphp

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allow

23RISCO

abrir ↗

Referência

CVE-2016-7083

CVE-2016-7083—

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado Thin

23RISCO

abrir ↗

Referência

CVE-2018-14912

CVE-2018-14912—

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned

60RISCO

abrir ↗

Referência

CVE-2026-11528

CVE-2026-11528HIGH

Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-7694

CVE-2026-7694MEDIUM

Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMinAvgValue sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7692

CVE-2026-7692MEDIUM

Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection

33RISCO

abrir ↗

Referência

CVE-2026-7691

CVE-2026-7691MEDIUM

Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection

33RISCO

abrir ↗

Referência

CVE-2026-7690

CVE-2026-7690MEDIUM

Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection

33RISCO

abrir ↗

Referência

CVE-2026-7689

CVE-2026-7689MEDIUM

Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification

33RISCO

abrir ↗

Referência

CVE-2026-7687

CVE-2026-7687MEDIUM

langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection

33RISCO

abrir ↗

Referência

CVE-2016-7089

CVE-2016-7089—

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifco

23RISCO

abrir ↗

Referência

CVE-2026-11502

CVE-2026-11502LOW

JeecgBoot Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect redirect

28RISCO

abrir ↗

Referência

CVE-2026-11501

CVE-2026-11501MEDIUM

SourceCodester Hospitals Patient Records Management System Master.php save_patient sql injection

33RISCO

abrir ↗

Referência

CVE-2014-4033

CVE-2014-4033—

Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.