Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-78138

CVE-2026-78138MEDIUM

Finale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_html

33RISCO

abrir ↗

Referência

CVE-2026-13414

CVE-2026-13414MEDIUM

CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax

33RISCO

abrir ↗

Referência

CVE-2026-81491

CVE-2026-81491MEDIUM

boxpositron with-context-mcp index.ts project_folder path traversal

33RISCO

abrir ↗

Referência

CVE-2026-80214

CVE-2026-80214HIGH

LibreNMS Virtualisation Discovery Module RCE

41RISCO

abrir ↗

Referência

CVE-2026-79912

CVE-2026-79912MEDIUM

TOTOLINK N600R cstecgi.cgi getCurrentTime command injection

33RISCO

abrir ↗

Referência

CVE-2026-79911

CVE-2026-79911CRITICAL

TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-79804

CVE-2026-79804MEDIUM

SililaWijesinghe Food Ordering System search.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-80184

CVE-2026-80184HIGH

In OpenStack Keystone before 29.0.3, tokens obtained via delegated authentication mechanisms (OAuth1 access tokens, appl

41RISCO

abrir ↗

Referência

CVE-2026-80182

CVE-2026-80182HIGH

In OpenStack Keystone before 29.0.3, tokens obtained via OAuth1 access token, application credential, or trust-scoped au

41RISCO

abrir ↗

Referência

CVE-2026-79793

CVE-2026-79793MEDIUM

code-projects Online Shopping System sumit_form.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-79792

CVE-2026-79792MEDIUM

zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection

33RISCO

abrir ↗

Referência

CVE-2026-71510

CVE-2026-71510HIGH

Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter

41RISCO

abrir ↗

Referência

CVE-2026-71509

CVE-2026-71509HIGH

Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-71508

CVE-2026-71508HIGH

Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-71507

CVE-2026-71507HIGH

Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

41RISCO

abrir ↗

Referência

CVE-2026-71506

CVE-2026-71506HIGH

Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint

41RISCO

abrir ↗

Referência★ 1

Original research and non-destructive PoC for a pre-auth stack buffer overflow via unbounded sscanf scanset in the Netis NC63 ipFilterList handler

CVE-2026-76071CRITICAL

Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

48RISCO

abrir ↗

Referência

CVE-2026-76070

CVE-2026-76070CRITICAL

Netis NC63 V3.0.0.3327 Stack Buffer Overflow via Login Password Parameter

48RISCO

abrir ↗

Referência

CVE-2026-78201

CVE-2026-78201MEDIUM

itsourcecode Payroll System admin_class.php login sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78200

CVE-2026-78200MEDIUM

itsourcecode Library Management System editbooks.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78199

CVE-2026-78199MEDIUM

SourceCodester Simple Online Food Ordering System view_prod.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78161

CVE-2026-78161MEDIUM

warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

33RISCO

abrir ↗

Referência

CVE-2026-78161

CVE-2026-78161MEDIUM

warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

33RISCO

abrir ↗

Referência

CVE-2026-78063

CVE-2026-78063MEDIUM

Tenda CH22 editFileName formeditFileName command injection

33RISCO

abrir ↗

Referência

CVE-2026-78060

CVE-2026-78060MEDIUM

SourceCodester Stock Management System getOrderReport.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-78122

CVE-2026-78122HIGH

docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

41RISCO

abrir ↗

Referência

CVE-2026-78049

CVE-2026-78049MEDIUM

Systerel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2026-77946

CVE-2026-77946CRITICAL

TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-77945

CVE-2026-77945MEDIUM

TRENDnet TEW-821DAP ssi upload.cgi command injection

33RISCO

abrir ↗

Referência

CVE-2026-18896

CVE-2026-18896MEDIUM

lavkush-maurya Student-Registration-System changepass.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.