Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.832 exploits

Referência

CVE-2026-16489

CVE-2026-16489MEDIUM

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

33RISCO

abrir ↗

Referência

CVE-2018-25383

CVE-2018-25383HIGH

Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2026-10126

CVE-2026-10126HIGH

Edimax BR-6478AC POST Request formQoS buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-64821

CVE-2026-64821MEDIUM

djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

33RISCO

abrir ↗

Referência

CVE-2026-16447

CVE-2026-16447MEDIUM

D-Link DNS-320 multi_uploadify.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-14184

CVE-2026-14184MEDIUM

Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-14183

CVE-2026-14183MEDIUM

Classified Listing < 5.3.9 - Subscriber+ Payment Receipt Disclosure via IDOR

33RISCO

abrir ↗

Referência

CVE-2026-9833

CVE-2026-9833HIGH

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-10208

CVE-2026-10208MEDIUM

code-projects Online Hospital Management System login_1.php login_user sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10206

CVE-2026-10206HIGH

D-Link DI-8400 dbsrv.asp stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10183

CVE-2026-10183HIGH

TRENDnet TEW-432BRP formWlanSetup stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10166

CVE-2026-10166MEDIUM

Edimax BR-6478AC POST Request formWlbasic command injection

33RISCO

abrir ↗

Referência

CVE-2026-10272

CVE-2026-10272MEDIUM

a4m4 Student-Management-System deleteform.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10271

CVE-2026-10271MEDIUM

a4m4 Student-Management-System Admin Endpoint admin redirect

33RISCO

abrir ↗

Referência✓ VexDay Proof

faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion

CVE-2006-5070—webappsphp

PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo

23RISCO

abrir ↗

Referência

CVE-2026-9460

CVE-2026-9460HIGH

Edimax EW-7438RPn formAccept stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9459

CVE-2026-9459HIGH

Edimax EW-7438RPn formConnectionSetting stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9458

CVE-2026-9458CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9457

CVE-2026-9457CRITICAL

Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9451

CVE-2026-9451MEDIUM

code-projects Employee Management System applyleaveprocess.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Polaring 0.04.03 - 'general.php' Remote File Inclusion

CVE-2006-5078—webappsphp

PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remot

23RISCO

abrir ↗

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

CVE-2006-5079—webappsphp

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote

23RISCO

abrir ↗

Referência✓ VexDay Proof

evoBB 0.3 - 'path' Remote File Inclusion

CVE-2006-5087—webappsphp

Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2018-17591

CVE-2018-17591—

AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

23RISCO

abrir ↗

Referência✓ VexDay Proof

A-Blog 2.0 - 'menu.php' Remote File Inclusion

CVE-2006-5092—webappsphp

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2026-10161

CVE-2026-10161HIGH

TRENDnet TEW-432BRP formResetStatistic stack-based overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

TagIt! Tagboard 2.1.b b2 - 'index.php' Remote File Inclusion

CVE-2006-5093—webappsphp

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows re

23RISCO

abrir ↗

Referência

CVE-2026-10209

CVE-2026-10209MEDIUM

code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9359

CVE-2026-9359MEDIUM

Edimax EW-7438RPn POST Request formHwSet command injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.