Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados
34.679CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.692 exploits
Referência
CVE-2026-7242
CVE-2026-7242CRITICAL
Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection
48RISCO
abrir ↗
Referência
CVE-2026-7078
CVE-2026-7078HIGH
Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow
41RISCO
abrir ↗
Referência
CVE-2026-10777
CVE-2026-10777MEDIUM
ealpha072 Student-Management-System Administrative Backend config.php improper authentication
33RISCO
abrir ↗
Referência
CVE-2026-10775
CVE-2026-10775LOW
sgl-project SGLang Cache data_hash denial of service
28RISCO
abrir ↗
Referência
CVE-2026-6601
CVE-2026-6601MEDIUM
Lagom WHMCS Template Datatables resource consumption
33RISCO
abrir ↗
Referência
CVE-2026-6587
CVE-2026-6587MEDIUM
vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgery
33RISCO
abrir ↗
Referência
CVE-2026-9528
CVE-2026-9528MEDIUM
itsourcecode Electronic Judging System delete_judge.php sql injection
33RISCO
abrir ↗
Referência✓ VexDay Proof
CSPartner 1.0 - Delete All Users / SQL Injection
CVE-2008-6165—webappsphp
SQL injection vulnerability in gestion.php in CSPartner 0.1, when magic_quotes_gpc is disabled, allows remote attackers
23RISCO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component Kbase 1.0 - SQL Injection
CVE-2008-6166—webappsphp
SQL injection vulnerability in the KBase (com_kbase) 1.2 component for Joomla! allows remote attackers to execute arbitr
23RISCO
abrir ↗
Referência✓ VexDay Proof
IndexScript 3.0 - 'parent_id' SQL Injection
CVE-2008-6179—webappsphp
SQL injection vulnerability in sug_cat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗
Referência✓ VexDay Proof
Joomla! Component ownbiblio 1.5.3 - 'catid' SQL Injection
CVE-2008-6184—webappsphp
SQL injection vulnerability in the OwnBiblio (com_ownbiblio) component 1.5.3 for Joomla! allows remote attackers to exec
23RISCO
abrir ↗
Referência
CVE-2021-47935
CVE-2021-47935HIGH
Sentry 8.2.0 Remote Code Execution via Pickle Deserialization
41RISCO
abrir ↗
Referência
CVE-2026-29004
CVE-2026-29004HIGH
BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS
41RISCO
abrir ↗
Referência
CVE-2026-7718
CVE-2026-7718MEDIUM
Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection
33RISCO
abrir ↗
Referência
CVE-2026-7717
CVE-2026-7717HIGH
Totolink WA300 POST Request cstecgi.cgi UploadCustomModule buffer overflow
41RISCO
abrir ↗
Referência
CVE-2026-7024
CVE-2026-7024MEDIUM
rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal
33RISCO
abrir ↗
Referência
CVE-2026-6602
CVE-2026-6602MEDIUM
rickxy Hospital Management System his_admin_account.php unrestricted upload
33RISCO
abrir ↗
Referência
CVE-2026-63087
CVE-2026-63087CRITICAL
Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
48RISCO
abrir ↗
Referência✓ VexDay Proof
KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection
CVE-2008-6197—webappsphp
SQL injection vulnerability in index.php in the galerie module for KwsPHP 1.3.456 allows remote attackers to execute arb
23RISCO
abrir ↗
Referência
CVE-2014-8687
CVE-2014-8687—
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root
50RISCO
abrir ↗
Referência
CVE-2014-8687
CVE-2014-8687—
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root
50RISCO
abrir ↗
Referência
CVE-2014-8687
CVE-2014-8687—
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root
50RISCO
abrir ↗
Referência
CVE-2026-59258
CVE-2026-59258HIGH
immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser
41RISCO
abrir ↗
Referência
CVE-2026-59255
CVE-2026-59255HIGH
BloodHound Missing Authorization on Custom Node Management API
41RISCO
abrir ↗
Referência
CVE-2026-58660
CVE-2026-58660HIGH
Kanboard BoardAjaxController Missing Ownership Check via Drag-and-Drop
41RISCO
abrir ↗
Referência
CVE-2026-58659
CVE-2026-58659HIGH
PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter
41RISCO
abrir ↗
Referência
CVE-2026-58658
CVE-2026-58658HIGH
GPUStack Unauthenticated Information Disclosure via Worker Endpoints
41RISCO
abrir ↗
Referência✓ VexDay Proof
MyBB Plugin Custom Pages 1.0 - SQL Injection
CVE-2008-6198—webappsphp
SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard (MyBB) allows remote attackers t
23RISCO
abrir ↗
Referência
CVE-2026-63730
CVE-2026-63730MEDIUM
HyperDX < 2.31.0 SSRF via Webhook Test Endpoint
33RISCO
abrir ↗
Referência
CVE-2026-63108
CVE-2026-63108HIGH
Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing
41RISCO
abrir ↗
← anteriorpágina 294 / 724próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.