Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2026-5971

CVE-2026-5971MEDIUM

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

33RISCO

abrir ↗

Referência

CVE-2026-5847

CVE-2026-5847MEDIUM

code-projects Movie Ticketing System SQL Database Backup File moviedb.sql information disclosure

33RISCO

abrir ↗

Referência

CVE-2026-5844

CVE-2026-5844HIGH

D-Link DIR-882 HNAP1 SetNetworkSettings prog.cgi sprintf os command injection

41RISCO

abrir ↗

Referência

CVE-2026-5842

CVE-2026-5842MEDIUM

decolua 9router Administrative API Endpoint api authorization

33RISCO

abrir ↗

Referência

CVE-2026-5841

CVE-2026-5841MEDIUM

Tenda i3 HTTP R7WebsSecurityHandler path traversal

33RISCO

abrir ↗

Referência

CVE-2026-5840

CVE-2026-5840MEDIUM

PHPGurukul News Portal Project check_availability.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5839

CVE-2026-5839MEDIUM

PHPGurukul News Portal Project add-subcategory.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5838

CVE-2026-5838MEDIUM

PHPGurukul News Portal Project add-subadmins.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5837

CVE-2026-5837MEDIUM

PHPGurukul News Portal Project news-details.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5836

CVE-2026-5836MEDIUM

code-projects Online Shoe Store admin_product.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5835

CVE-2026-5835MEDIUM

code-projects Online Shoe Store admin_football.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5834

CVE-2026-5834MEDIUM

code-projects Online Shoe Store admin_running.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5833

CVE-2026-5833MEDIUM

awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

jPORTAL 2.3.1 - 'articles.php' SQL Injection

CVE-2007-5973—webappsphp

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2018-6585

CVE-2018-6585—

SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or fi

23RISCO

abrir ↗

Referência

CVE-2018-6604

CVE-2018-6604—

SQL Injection exists in the Zh YandexMap 6.2.1.0 component for Joomla! via the id parameter in a task=getPlacemarkDetail

23RISCO

abrir ↗

Referência

CVE-2018-6606

CVE-2018-6606—

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows

23RISCO

abrir ↗

Referência

Joomla! Component JSP Tickets 1.1 - SQL Injection

CVE-2018-6609—webappsphp

SQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in a ticketlist edit acti

23RISCO

abrir ↗

Referência

CVE-2011-0420

CVE-2011-0420—

The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependen

28RISCO

abrir ↗

Referência

CVE-2021-4473

CVE-2021-4473CRITICAL

Tianxin Internet Behavior Management System Command Injection via toQuery.php

48RISCO

abrir ↗

Referência

CVE-2026-22666

CVE-2026-22666HIGH

Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()

46RISCO

abrir ↗

Referência

CVE-2026-4079

CVE-2026-4079MEDIUM

SQL Chart Builder < 2.3.8 - Unauthenticated SQL Injection

33RISCO

abrir ↗

Referência

CVE-2026-1900

CVE-2026-1900MEDIUM

Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

33RISCO

abrir ↗

Referência

CVE-2025-15611

CVE-2025-15611MEDIUM

Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF

33RISCO

abrir ↗

Referência

CVE-2026-5719

CVE-2026-5719MEDIUM

itsourcecode Construction Management System borrowedtool.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5692

CVE-2026-5692MEDIUM

Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection

33RISCO

abrir ↗

Referência

CVE-2018-6755

CVE-2018-6755HIGH

True Key (TK) Windows Client - Weak Directory Permission Vulnerability

41RISCO

abrir ↗

Referência✓ VexDay Proof

project alumni 1.0.9 - Cross-Site Scripting / SQL Injection

CVE-2007-6126—webappsphp

Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject

23RISCO

abrir ↗

Referência

CVE-2018-6756

CVE-2018-6756HIGH

True Key (TK) Windows Client - Authentication Abuse vulnerability

41RISCO

abrir ↗

Referência

CVE-2018-6888

CVE-2018-6888—

An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cro

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.