Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-78166

CVE-2026-78166MEDIUM

provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection

33RISCO

abrir ↗

Referência

CVE-2010-5284

CVE-2010-5284—

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2017-0089

CVE-2017-0089—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

abrir ↗

Referência

CVE-2017-0090

CVE-2017-0090—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

abrir ↗

Referência

CVE-2017-0092

CVE-2017-0092—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2018-20525

CVE-2018-20525—

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

abrir ↗

Referência

CVE-2026-15046

CVE-2026-15046MEDIUM

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

33RISCO

abrir ↗

Referência

CVE-2026-2601

CVE-2026-2601MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-4868

CVE-2026-4868HIGH

Authorization Bypass Through User-Controlled Key in GitLab

41RISCO

abrir ↗

Referência

CVE-2026-5296

CVE-2026-5296MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-6713

CVE-2026-6713MEDIUM

Incorrect Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-13176

CVE-2026-13176LOW

Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery

28RISCO

abrir ↗

Referência

CVE-2026-77686

CVE-2026-77686MEDIUM

Dolibarr Account card.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-47080

CVE-2026-47080LOW

CDATA Section Breakout via Unsanitised ]]> in xml_builder

28RISCO

abrir ↗

Referência

CVE-2026-77681

CVE-2026-77681MEDIUM

CodeAstro Online Job Portal update-profile.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-75796

CVE-2026-75796HIGH

AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

41RISCO

abrir ↗

Referência

CVE-2026-19085

CVE-2026-19085LOW

Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

28RISCO

abrir ↗

Referência

CVE-2010-5285

CVE-2010-5285—

Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a

23RISCO

abrir ↗

Referência

CVE-2026-76795

CVE-2026-76795MEDIUM

AeternaLabsHQ PullMD REST API Endpoint api server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-76785

CVE-2026-76785MEDIUM

amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

33RISCO

abrir ↗

Referência

CVE-2010-5323

CVE-2010-5323—

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M

28RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.01 - Database Backup Download

CVE-2006-4782—webappsphp

src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authe

23RISCO

abrir ↗

Referência

CVE-2014-4960

CVE-2014-4960—

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x throu

23RISCO

abrir ↗

Referência

CVE-2014-4960

CVE-2014-4960—

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery (com_youtubegallery) component 4.x throu

23RISCO

abrir ↗

Referência

CVE-2026-14632

CVE-2026-14632MEDIUM

kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect

33RISCO

abrir ↗

Referência

CVE-2026-76589

CVE-2026-76589CRITICAL

TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-76583

CVE-2026-76583MEDIUM

TRENDnet TV-IP751WIC alphapd set_time.cgi command injection

33RISCO

abrir ↗

Referência

CVE-2026-76050

CVE-2026-76050MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection

33RISCO

abrir ↗

Referência

CVE-2012-6560

CVE-2012-6560—

SQL injection vulnerability in deviceadd.php in FreeNAC 3.02 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2015-1478

CVE-2015-1478—

Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attac

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.