Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

22.721 exploits

Referência

CVE-2026-12797

CVE-2026-12797MEDIUM

BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization

33RISCO

abrir ↗

Referência

CVE-2026-12776

CVE-2026-12776MEDIUM

Montodel House-Rental-Management index.php houses sql injection

33RISCO

abrir ↗

Referência

CVE-2026-12774

CVE-2026-12774MEDIUM

BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-12771

CVE-2026-12771LOW

BerriAI litellm M2M JWT user_api_key_auth.py improper authorization

28RISCO

abrir ↗

Referência

CVE-2022-50972

CVE-2022-50972CRITICAL

WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

48RISCO

abrir ↗

Referência

CVE-2026-10877

CVE-2026-10877MEDIUM

SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10876

CVE-2026-10876MEDIUM

SourceCodester Ship Ferry Ticket Reservation System admin improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10870

CVE-2026-10870HIGH

Shibby Tomato Web UI rc start_dhcpc os command injection

41RISCO

abrir ↗

Referência

CVE-2025-71316

CVE-2025-71316CRITICAL

SQLite sqldiff remote code execution via argument injection

48RISCO

abrir ↗

Referência

CVE-2026-25551

CVE-2026-25551HIGH

Seagull Software BarTender Deserialization Privilege Escalation via .NET Remoting Service

41RISCO

abrir ↗

Referência

CVE-2026-10813

CVE-2026-10813LOW

LMCache KV Cache utils.py hex_hash_to_int16 weak hash

28RISCO

abrir ↗

Referência

CVE-2026-10811

CVE-2026-10811MEDIUM

itsourcecode Fees Management System receipt.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

iPhotoAlbum 1.1 - 'header.php' Remote File Inclusion

CVE-2005-2246—webappsphp

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code v

23RISCO

abrir ↗

Referência

CVE-2026-10550

CVE-2026-10550MEDIUM

elunez eladmin Application Deployment App.java command injection

33RISCO

abrir ↗

Referência

CVE-2026-10548

CVE-2026-10548MEDIUM

NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10301

CVE-2026-10301MEDIUM

itsourcecode Fees Management System index.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10295

CVE-2026-10295MEDIUM

SourceCodester Customer Review App review_app.py get_all_reviews denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10292

CVE-2026-10292HIGH

UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10290

CVE-2026-10290MEDIUM

code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10289

CVE-2026-10289MEDIUM

code-projects Hotel and Tourism Reservation System tour.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-12189

CVE-2026-12189MEDIUM

Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

33RISCO

abrir ↗

Referência

CVE-2026-12187

CVE-2026-12187HIGH

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

41RISCO

abrir ↗

Referência

CVE-2026-12186

CVE-2026-12186HIGH

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

41RISCO

abrir ↗

Referência

CVE-2025-15546

CVE-2025-15546MEDIUM

Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition

33RISCO

abrir ↗

Referência

CVE-2026-12174

CVE-2026-12174HIGH

D-Link DCS-935L HTTP rhea snprintf format string

41RISCO

abrir ↗

Referência

CVE-2026-25557

CVE-2026-25557MEDIUM

Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter

33RISCO

abrir ↗

Referência

CVE-2004-0798

CVE-2004-0798—

Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to

50RISCO

abrir ↗

Referência

CVE-2026-11621

CVE-2026-11621MEDIUM

Dcat-Admin User Setting upload editorMDUpload unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-11584

CVE-2026-11584MEDIUM

CodeAstro Student Attendance Management System createClass.php edit sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11583

CVE-2026-11583MEDIUM

CodeAstro Student Attendance Management System createClass.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.