Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.324exploits catalogados

36.054CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2018-6222

CVE-2018-6222—

Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log fi

23RISCO

abrir ↗

Referência

CVE-2026-6197

CVE-2026-6197HIGH

Tenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-6168

CVE-2026-6168HIGH

TOTOLINK A7000R cstecgi.cgi setWiFiEasyGuestCfg stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-6166

CVE-2026-6166MEDIUM

code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-3830

CVE-2026-3830HIGH

Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi

41RISCO

abrir ↗

Referência

CVE-2025-15441

CVE-2025-15441MEDIUM

Form Maker < 1.15.38 - SQL Injection

33RISCO

abrir ↗

Referência

CVE-2026-6165

CVE-2026-6165MEDIUM

code-projects Vehicle Showroom Management System Login_check.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6164

CVE-2026-6164MEDIUM

code-projects Lost and Found Thing Management addcat.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6163

CVE-2026-6163MEDIUM

code-projects Lost and Found Thing Management catageory.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6162

CVE-2026-6162MEDIUM

PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6161

CVE-2026-6161MEDIUM

code-projects Simple ChatBox Endpoint insert.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6160

CVE-2026-6160MEDIUM

code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-6159

CVE-2026-6159MEDIUM

code-projects Simple ChatBox Endpoint insert.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-75093

CVE-2026-75093MEDIUM

sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size

33RISCO

abrir ↗

Referência

Joomla! Component JMS Music 1.1.1 - SQL Injection

CVE-2018-6581—webappsphp

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username par

23RISCO

abrir ↗

Referência

CVE-2011-0489

CVE-2011-0489—

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows rem

28RISCO

abrir ↗

Referência

CVE-2026-5574

CVE-2026-5574MEDIUM

Technostrobe HI-LED-WR120-G2 FsBrowseClean deletefile authorization

33RISCO

abrir ↗

Referência

CVE-2026-5573

CVE-2026-5573MEDIUM

Technostrobe HI-LED-WR120-G2 fs unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-5572

CVE-2026-5572MEDIUM

Technostrobe HI-LED-WR120-G2 cross-site request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5571

CVE-2026-5571MEDIUM

Technostrobe HI-LED-WR120-G2 Configuration Data fs information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-5570

CVE-2026-5570MEDIUM

Technostrobe HI-LED-WR120-G2 LoginCB index_config improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-5569

CVE-2026-5569MEDIUM

Technostrobe HI-LED-WR120-G2 Endpoint access control

33RISCO

abrir ↗

Referência

CVE-2026-5568

CVE-2026-5568MEDIUM

Akaunting Invoice/Billing cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5567

CVE-2026-5567HIGH

Tenda M3 Destination setAdvPolicyData buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-5566

CVE-2026-5566HIGH

UTT HiPER 1250GW formNatStaticMap strcpy buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-5565

CVE-2026-5565MEDIUM

code-projects Simple Laundry System Parameter delmemberinfo.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Haberx 1.02 < 1.1 - 'tr' SQL Injection

CVE-2006-4853—webappsasp

SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2014-5112

CVE-2014-5112—

maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacha

23RISCO

abrir ↗

Referência

CVE-2026-12798

CVE-2026-12798MEDIUM

BerriAI litellm MCP OpenAPI Spec Loader openapi_to_mcp_generator.py load_openapi_spec_async server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2014-5194

CVE-2014-5194—

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.