Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.325exploits catalogados

36.055CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.721GitHub PoC 14.478VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-22683

CVE-2026-22683HIGH

Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE

56RISCO

abrir ↗

Referência

CVE-2026-33866

CVE-2026-33866MEDIUM

Authorization Bypass in MLflow AJAX Endpoint

33RISCO

abrir ↗

Referência

CVE-2026-33865

CVE-2026-33865MEDIUM

Stored XSS via unsafe YAML parsing in MLflow

33RISCO

abrir ↗

Referência

CVE-2026-22679

CVE-2026-22679CRITICAL

Weaver E-cology 10.0 Unauthenticated RCE via dubboApi Debug Endpoint

53RISCO

abrir ↗

Referência

CVE-2018-25300

CVE-2018-25300HIGH

XATABoost CMS 1.0.0 SQL Injection via news.php

41RISCO

abrir ↗

Referência

CVE-2026-7392

CVE-2026-7392MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7391

CVE-2026-7391MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7390

CVE-2026-7390MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7389

CVE-2026-7389MEDIUM

EyouCMS common.php GetSortData sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7388

CVE-2026-7388MEDIUM

EyouCMS Template File FilemanagerLogic.php editFile code injection

33RISCO

abrir ↗

Referência

CVE-2016-9299

CVE-2016-9299—

The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a

60RISCO

abrir ↗

Referência

CVE-2012-3835

CVE-2012-3835—

Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.

23RISCO

abrir ↗

Referência

CVE-2012-3839

CVE-2012-3839—

Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2018-18799

CVE-2018-18799—

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

23RISCO

abrir ↗

Referência

CVE-2017-0089

CVE-2017-0089—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

abrir ↗

Referência

CVE-2017-0090

CVE-2017-0090—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

35RISCO

abrir ↗

Referência

CVE-2017-0092

CVE-2017-0092—

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers

28RISCO

abrir ↗

Referência

CVE-2018-20525

CVE-2018-20525—

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

abrir ↗

Referência

CVE-2026-15046

CVE-2026-15046MEDIUM

LitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF

33RISCO

abrir ↗

Referência

CVE-2026-2601

CVE-2026-2601MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-4868

CVE-2026-4868HIGH

Authorization Bypass Through User-Controlled Key in GitLab

41RISCO

abrir ↗

Referência

CVE-2026-5296

CVE-2026-5296MEDIUM

Missing Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-6713

CVE-2026-6713MEDIUM

Incorrect Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-13176

CVE-2026-13176LOW

Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery

28RISCO

abrir ↗

Referência

CVE-2026-77686

CVE-2026-77686MEDIUM

Dolibarr Account card.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-47080

CVE-2026-47080LOW

CDATA Section Breakout via Unsanitised ]]> in xml_builder

28RISCO

abrir ↗

Referência

CVE-2026-77681

CVE-2026-77681MEDIUM

CodeAstro Online Job Portal update-profile.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-75796

CVE-2026-75796HIGH

AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

41RISCO

abrir ↗

Referência

CVE-2026-19085

CVE-2026-19085LOW

Copy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content Disclosure

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.