Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2026-10550

CVE-2026-10550MEDIUM

elunez eladmin Application Deployment App.java command injection

33RISCO

abrir ↗

Referência

CVE-2026-10548

CVE-2026-10548MEDIUM

NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10301

CVE-2026-10301MEDIUM

itsourcecode Fees Management System index.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10295

CVE-2026-10295MEDIUM

SourceCodester Customer Review App review_app.py get_all_reviews denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10294

CVE-2026-10294MEDIUM

PackageKit API pk-transaction.c g_file_test improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-10292

CVE-2026-10292HIGH

UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10290

CVE-2026-10290MEDIUM

code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10289

CVE-2026-10289MEDIUM

code-projects Hotel and Tourism Reservation System tour.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10288

CVE-2026-10288MEDIUM

code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10287

CVE-2026-10287MEDIUM

SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-10286

CVE-2026-10286MEDIUM

CodeAstro Payroll System home_employee.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10274

CVE-2026-10274MEDIUM

indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-46243

CVE-2026-46243HIGH

smb: client: reject userspace cifs.spnego descriptions

41RISCO

abrir ↗

Referência

CVE-2026-10273

CVE-2026-10273MEDIUM

php-censor Webhook Endpoint GitBuild.php os command injection

33RISCO

abrir ↗

Referência

CVE-2026-10181

CVE-2026-10181HIGH

TRENDnet TEW-432BRP formSysCmd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10175

CVE-2026-10175MEDIUM

Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

33RISCO

abrir ↗

Referência

CVE-2026-10174

CVE-2026-10174MEDIUM

Aider-AI Aider Pre-commit Hook args.py protection mechanism

33RISCO

abrir ↗

Referência

CVE-2026-10173

CVE-2026-10173MEDIUM

Orthanc Explorer 2 URL StudyList.vue cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10172

CVE-2026-10172MEDIUM

Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-10171

CVE-2026-10171MEDIUM

code-projects Online Music Site AdminUpdateAlbum.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9448

CVE-2026-9448MEDIUM

code-projects Employee Management System applyleave.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9445

CVE-2026-9445MEDIUM

SourceCodester Simple POS and Inventory System File Extension addproduct.php unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-9444

CVE-2026-9444MEDIUM

SourceCodester Simple POS and Inventory System GET Parameter deleteproduct.php delete sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9441

CVE-2026-9441MEDIUM

Edimax BR-6478AC POST Request formiNICbasic command injection

33RISCO

abrir ↗

Referência

CVE-2026-9440

CVE-2026-9440MEDIUM

Edimax BR-6478AC POST Request formAccept command injection

33RISCO

abrir ↗

Referência

CVE-2026-7385

CVE-2026-7385MEDIUM

Decent Comments < 3.0.2 - Unauthenticated Email Address Disclosure

33RISCO

abrir ↗

Referência

CVE-2026-5776

CVE-2026-5776MEDIUM

Email Encoder < 2.4.7 - Unauthenticated Stored XSS

33RISCO

abrir ↗

Referência

CVE-2026-45585

CVE-2026-45585MEDIUM

Windows BitLocker Security Feature Bypass Vulnerability

33RISCO

abrir ↗

Referência

CVE-2026-41470

CVE-2026-41470HIGH

LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token

41RISCO

abrir ↗

Referência

CVE-2026-32848

CVE-2026-32848MEDIUM

NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.