Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.057exploits catalogados

36.288CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentes populares risco

22.910 exploits

Referência

CVE-2026-16154

CVE-2026-16154MEDIUM

SourceCodester Class and Exam Timetabling System edit_room1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-16152

CVE-2026-16152MEDIUM

SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-25424

CVE-2018-25424HIGH

Gate Pass Management System 2.1 SQL Injection via login-exec.php

41RISCO

abrir ↗

Referência

CVE-2026-16133

CVE-2026-16133LOW

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

28RISCO

abrir ↗

Referência

CVE-2026-16131

CVE-2026-16131MEDIUM

itsourcecode Hospital Management System prescriptionrecord.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-25423

CVE-2018-25423MEDIUM

Arm Whois 3.11 Denial of Service via Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25418

CVE-2018-25418HIGH

AiOPMSD Final 1.0.0 SQL Injection via year.php

41RISCO

abrir ↗

Referência

CVE-2018-25413

CVE-2018-25413HIGH

AiOPMSD Final 1.0.0 SQL Injection via search.php

41RISCO

abrir ↗

Referência

CVE-2018-25412

CVE-2018-25412CRITICAL

Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php

48RISCO

abrir ↗

Referência

CVE-2018-25411

CVE-2018-25411HIGH

MGB OpenSource Guestbook 0.7.0.2 SQL Injection via email.php

41RISCO

abrir ↗

Referência

CVE-2026-9833

CVE-2026-9833HIGH

Tag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' Parameter

41RISCO

abrir ↗

Referência

CVE-2026-11349

CVE-2026-11349HIGH

Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more

41RISCO

abrir ↗

Referência

CVE-2018-25383

CVE-2018-25383HIGH

Free MP3 CD Ripper 2.8 Buffer Overflow SEH DEP Bypass

41RISCO

abrir ↗

Referência

CVE-2026-10755

CVE-2026-10755LOW

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration

28RISCO

abrir ↗

Referência

CVE-2026-16489

CVE-2026-16489MEDIUM

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

33RISCO

abrir ↗

Referência

CVE-2026-10126

CVE-2026-10126HIGH

Edimax BR-6478AC POST Request formQoS buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-10081

CVE-2026-10081HIGH

Unlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews Widget

41RISCO

abrir ↗

Referência

CVE-2026-64821

CVE-2026-64821MEDIUM

djangoSIGE 1.10 CSRF via GET-based Order Cancellation Views

33RISCO

abrir ↗

Referência

CVE-2026-10208

CVE-2026-10208MEDIUM

code-projects Online Hospital Management System login_1.php login_user sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10206

CVE-2026-10206HIGH

D-Link DI-8400 dbsrv.asp stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10183

CVE-2026-10183HIGH

TRENDnet TEW-432BRP formWlanSetup stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10166

CVE-2026-10166MEDIUM

Edimax BR-6478AC POST Request formWlbasic command injection

33RISCO

abrir ↗

Referência

CVE-2026-10272

CVE-2026-10272MEDIUM

a4m4 Student-Management-System deleteform.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10271

CVE-2026-10271MEDIUM

a4m4 Student-Management-System Admin Endpoint admin redirect

33RISCO

abrir ↗

Referência✓ VexDay Proof

faceStones personal 2.0.42 - 'fs_form_links.php' File Inclusion

CVE-2006-5070—webappsphp

PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allo

23RISCO

abrir ↗

Referência

CVE-2026-9460

CVE-2026-9460HIGH

Edimax EW-7438RPn formAccept stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9459

CVE-2026-9459HIGH

Edimax EW-7438RPn formConnectionSetting stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9458

CVE-2026-9458CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWanCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9457

CVE-2026-9457CRITICAL

Totolink A8000RU Web Management cstecgi.cgi UploadFirmwareFile os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9451

CVE-2026-9451MEDIUM

code-projects Employee Management System applyleaveprocess.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.