Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.205exploits catalogados

35.417CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.123VulnCheck XDB 8.617Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2026-7032

CVE-2026-7032HIGH

Tenda F456 SafeEmailFilter buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7031

CVE-2026-7031HIGH

Tenda F456 SafeMacFilter fromSafeMacFilter buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7030

CVE-2026-7030HIGH

Tenda F456 RouteStatic fromRouteStatic buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7029

CVE-2026-7029HIGH

Tenda F456 addressNat fromaddressNat buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7028

CVE-2026-7028MEDIUM

CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-7025

CVE-2026-7025MEDIUM

Typecho Ping Back Service Endpoint Service.php sendPingHandle server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2018-13405

CVE-2018-13405—

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an

23RISCO

abrir ↗

Referência

CVE-2026-8234

CVE-2026-8234HIGH

EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-8231

CVE-2026-8231MEDIUM

CodeAstro Online Catering Ordering System deleteorder.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

WebCalendar 1.2.4 - Remote Code Execution

CVE-2012-1495—webappsphp

install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user

60RISCO

abrir ↗

Referência

CVE-2026-7682

CVE-2026-7682MEDIUM

Edimax BR-6208AC L2TP Mode setWAN command injection

33RISCO

abrir ↗

Referência

CVE-2026-7582

CVE-2026-7582MEDIUM

AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write

33RISCO

abrir ↗

Referência

CVE-2026-7144

CVE-2026-7144MEDIUM

1000 Projects Portfolio Management System MCA update_passwd_process.php authorization

33RISCO

abrir ↗

Referência

CVE-2026-7581

CVE-2026-7581MEDIUM

alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy

33RISCO

abrir ↗

Referência

CVE-2026-7579

CVE-2026-7579MEDIUM

AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials

33RISCO

abrir ↗

Referência

CVE-2026-7578

CVE-2026-7578MEDIUM

MacCMS Pro Plugin Installation add.html install unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-7555

CVE-2026-7555MEDIUM

itsourcecode Electronic Judging System login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-41466

CVE-2026-41466MEDIUM

ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()

33RISCO

abrir ↗

Referência

CVE-2026-41465

CVE-2026-41465HIGH

ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php

41RISCO

abrir ↗

Referência

CVE-2026-41464

CVE-2026-41464HIGH

ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php

41RISCO

abrir ↗

Referência

CVE-2026-41464

CVE-2026-41464HIGH

ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php

41RISCO

abrir ↗

Referência

CVE-2026-41463

CVE-2026-41463HIGH

ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php

41RISCO

abrir ↗

Referência

CVE-2026-41463

CVE-2026-41463HIGH

ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php

41RISCO

abrir ↗

Referência

CVE-2026-41462

CVE-2026-41462CRITICAL

ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login

48RISCO

abrir ↗

Referência

CVE-2026-6623

CVE-2026-6623MEDIUM

BichitroGan ISP Billing Software Profile users-view cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6622

CVE-2026-6622MEDIUM

BichitroGan ISP Billing Software Customer edit cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6620

CVE-2026-6620MEDIUM

SonicCloudOrg sonic-server File Upload Endpoint FileTool.java upload path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6619

CVE-2026-6619MEDIUM

langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-6618

CVE-2026-6618MEDIUM

langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-6616

CVE-2026-6616MEDIUM

TransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgery

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.