Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2026-7091

CVE-2026-7091MEDIUM

code-projects Invoice System in Laravel User Management user improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-7090

CVE-2026-7090MEDIUM

code-projects Chat System send_message.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7089

CVE-2026-7089MEDIUM

code-projects Home Service System Appointment Booking booking.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7088

CVE-2026-7088MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7087

CVE-2026-7087MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7086

CVE-2026-7086MEDIUM

HBAI-Ltd Toonflow-app Storyboard Export replaceUrl.ts updateStoryboardUrl path traversal

33RISCO

abrir ↗

Referência

CVE-2026-7085

CVE-2026-7085LOW

HBAI-Ltd Toonflow-app downloadApp Endpoint downloadApp.ts z.url path traversal

28RISCO

abrir ↗

Referência

CVE-2026-7084

CVE-2026-7084MEDIUM

HBAI-Ltd Toonflow-app getCodeByLink Endpoint getCodeByLink.ts fetch server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-7083

CVE-2026-7083MEDIUM

likeadmin-likeshop likeadmin_php dataTable Admin API DataTableLists.php queryResult sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7082

CVE-2026-7082HIGH

Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7081

CVE-2026-7081HIGH

Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7080

CVE-2026-7080HIGH

Tenda F456 httpd PPTPUserSetting fromPPTPUserSetting buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7079

CVE-2026-7079HIGH

Tenda F456 httpd AdvSetWan fromAdvSetWan buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-43500

CVE-2026-43500HIGH

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

78RISCO

abrir ↗

Referência

CVE-2026-14605

CVE-2026-14605HIGH

RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-14604

CVE-2026-14604MEDIUM

Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free

33RISCO

abrir ↗

Referência

CVE-2026-34103

CVE-2026-34103CRITICAL

Guardian Language-System Unauthenticated SQL Injection via id Parameter in subtitles.php

48RISCO

abrir ↗

Referência

CVE-2026-8321

CVE-2026-8321MEDIUM

inkeep agents runAuth Middleware runAuth.ts createDevContext authentication bypass

33RISCO

abrir ↗

Referência

CVE-2026-8320

CVE-2026-8320MEDIUM

jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-8319

CVE-2026-8319MEDIUM

aiwaves-cn agents cheshire_cat_core stray_cat.py recall_relevant_memories_to_working_memory resource consumption

33RISCO

abrir ↗

Referência

CVE-2026-8318

CVE-2026-8318MEDIUM

VectifyAI PageIndex PDF Table of Contents page_index.py toc_transformer infinite loop

33RISCO

abrir ↗

Referência

CVE-2026-43640

CVE-2026-43640HIGH

Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM API Key

41RISCO

abrir ↗

Referência

CVE-2026-43639

CVE-2026-43639HIGH

Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients

41RISCO

abrir ↗

Referência

CVE-2026-43638

CVE-2026-43638MEDIUM

Bitwarden Server < 2026.4.1 Missing Authorization via Organization Cipher Import

33RISCO

abrir ↗

Referência

CVE-2026-7067

CVE-2026-7067MEDIUM

D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection

33RISCO

abrir ↗

Referência

CVE-2026-7066

CVE-2026-7066MEDIUM

choieastsea simple-openstack-mcp server.py exec_openstack os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7065

CVE-2026-7065MEDIUM

BidingCC BuildingAI Remote Upload API file-storage.service.ts uploadRemoteFile server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-7064

CVE-2026-7064MEDIUM

AgentDeskAI browser-tools-mcp browser-connector.ts os command injection

33RISCO

abrir ↗

Referência

CVE-2026-7063

CVE-2026-7063MEDIUM

code-projects Employee Management System Endpoint eprocess.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7062

CVE-2026-7062MEDIUM

Intina47 context-sync Git Integration git-integration.ts os command injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.