Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-6132

CVE-2026-6132CRITICAL

Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6131

CVE-2026-6131CRITICAL

Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6130

CVE-2026-6130MEDIUM

chatboxai chatbox Model Context Protocol Server Management System ipc-stdio-transport.ts StdioClientTransport os command injection

33RISCO

abrir ↗

Referência

CVE-2014-10013

CVE-2014-10013—

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2026-5825

CVE-2026-5825MEDIUM

code-projects Simple Laundry System delmemberinfo.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-29923

CVE-2026-29923HIGH

The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a

41RISCO

abrir ↗

Referência

CVE-2026-5824

CVE-2026-5824MEDIUM

code-projects Simple Laundry System userchecklogin.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5823

CVE-2026-5823MEDIUM

itsourcecode Construction Management System borrowed_tool_report.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5815

CVE-2026-5815HIGH

D-Link DIR-645 hedwig.cgi hedwigcgi_main stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5814

CVE-2026-5814MEDIUM

PHPGurukul Online Course Registration check_availability.php sql injection

33RISCO

abrir ↗

Referência

CVE-2014-10020

CVE-2014-10020—

SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2026-5634

CVE-2026-5634MEDIUM

projectworlds Car Rental Project Parameter book_car.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5632

CVE-2026-5632MEDIUM

assafelovic gpt-researcher HTTP REST API Endpoint missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-5631

CVE-2026-5631MEDIUM

assafelovic gpt-researcher ws Endpoint server_utils.py extract_command_data code injection

33RISCO

abrir ↗

Referência

CVE-2026-5630

CVE-2026-5630MEDIUM

assafelovic gpt-researcher Report API app.py cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5629

CVE-2026-5629HIGH

Belkin F9K1015 formSetFirewall stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5628

CVE-2026-5628HIGH

Belkin F9K1015 Setting formSetSystemSettings stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5625

CVE-2026-5625MEDIUM

assafelovic gpt-researcher WebSocket researcher.py cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5621

CVE-2026-5621MEDIUM

ChrisChinchilla Vale-MCP HTTP index.ts os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5620

CVE-2026-5620MEDIUM

itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5619

CVE-2026-5619MEDIUM

Braffolk mcp-summarization-functions summarize_command mcp-server.ts os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5618

CVE-2026-5618MEDIUM

kalcaddle kodbox shareMake/shareCheck server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5615

CVE-2026-5615MEDIUM

givanz Vvvebjs File Upload Endpoint upload.php cross site scripting

48RISCO

abrir ↗

Referência

CVE-2026-5614

CVE-2026-5614HIGH

Belkin F9K1015 formSetPassword stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5605

CVE-2026-5605HIGH

Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5604

CVE-2026-5604HIGH

Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5603

CVE-2026-5603MEDIUM

elgentos magento2-dev-mcp index.ts executeMagerun2Command os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5602

CVE-2026-5602MEDIUM

Nor2-io heim-mcp new_heim_application tools.ts registerTools os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5601

CVE-2026-5601MEDIUM

Acrel Electrical Prepaid Cloud Platform Backup File bin.rar information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-5597

CVE-2026-5597MEDIUM

griptape-ai griptape ComputerTool tool.py path traversal

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.