Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados

36.057CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2019-25726

CVE-2019-25726HIGH

All in One Video Downloader 1.2 SQL Injection via admin page-edit

41RISCO

abrir ↗

Referência

CVE-2026-10160

CVE-2026-10160HIGH

TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10159

CVE-2026-10159HIGH

TRENDnet TEW-432BRP formSysLog stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10158

CVE-2026-10158HIGH

TRENDnet TEW-432BRP formPortFw stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-15471

CVE-2026-15471MEDIUM

Eleveo Call Recording Software pci_dss_status.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15470

CVE-2026-15470MEDIUM

Eleveo Call Recording Software group.jsp improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-15311

CVE-2026-15311MEDIUM

NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10810

CVE-2026-10810MEDIUM

itsourcecode Fees Management System navbar.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7716

CVE-2026-7716MEDIUM

code-projects Gym Management System In PHP/Windows NT index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7071

CVE-2026-7071MEDIUM

CodeAstro Online Job Portal user-cvs file information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-7070

CVE-2026-7070MEDIUM

code-projects Inventory Management System Login sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7069

CVE-2026-7069HIGH

D-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-15547

CVE-2026-15547MEDIUM

Shibby Tomato CIFS Mount sub_2D048 os command injection

33RISCO

abrir ↗

Referência

CVE-2026-47123

CVE-2026-47123HIGH

FreeScout: Agent Impersonation via Missing HMAC Verification on Notification Reply Message-ID Path

41RISCO

abrir ↗

Referência

CVE-2026-75012

CVE-2026-75012HIGH

TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference

41RISCO

abrir ↗

Referência

CVE-2026-19997

CVE-2026-19997MEDIUM

Webkul Bagisto Backend Sales RMA Endpoint requests authorization

33RISCO

abrir ↗

Referência

CVE-2011-4340

CVE-2011-4340—

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow

23RISCO

abrir ↗

Referência

CVE-2026-19996

CVE-2026-19996MEDIUM

Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management

33RISCO

abrir ↗

Referência✓ VexDay Proof

Minichat 6.0 - 'ftag.php' Remote File Inclusion

CVE-2006-5283—webappsphp

PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP cod

23RISCO

abrir ↗

Referência✓ VexDay Proof

Limbo CMS - Private Messaging Component SQL Injection

CVE-2008-6078—webappsphp

SQL injection vulnerability in open.php in the Private Messaging (com_privmsg) component for Limbo CMS allows remote att

23RISCO

abrir ↗

Referência

CVE-2026-15696

CVE-2026-15696HIGH

Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow

41RISCO

abrir ↗

Referência

Security research on Craft CMS authentication mechanism

CVE-2026-31266HIGH

Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate

41RISCO

abrir ↗

Referência

CVE-2021-47935

CVE-2021-47935HIGH

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

41RISCO

abrir ↗

Referência

CVE-2026-29004

CVE-2026-29004HIGH

BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS

41RISCO

abrir ↗

Referência

CVE-2026-7718

CVE-2026-7718MEDIUM

Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection

33RISCO

abrir ↗

Referência

CVE-2026-7717

CVE-2026-7717HIGH

Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7024

CVE-2026-7024MEDIUM

rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6602

CVE-2026-6602MEDIUM

rickxy Hospital Management System his_admin_account.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2017-11911

CVE-2017-11911—

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code i

35RISCO

abrir ↗

Referência

CVE-2026-19901

CVE-2026-19901CRITICAL

LB-LINK X-PRO easycwmp hard-coded credentials

48RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.