Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2026-13546

CVE-2026-13546MEDIUM

Feehi CMS REST API Endpoint articles missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-5633

CVE-2026-5633MEDIUM

assafelovic gpt-researcher ws Endpoint server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2013-4694

CVE-2013-4694—

Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial

28RISCO

abrir ↗

Referência

CVE-2018-25235

CVE-2018-25235MEDIUM

NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS

33RISCO

abrir ↗

Referência

CVE-2026-5330

CVE-2026-5330MEDIUM

SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control

33RISCO

abrir ↗

Referência

CVE-2026-5328

CVE-2026-5328MEDIUM

shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5327

CVE-2026-5327MEDIUM

efforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injection

33RISCO

abrir ↗

Referência

CVE-2026-5326

CVE-2026-5326MEDIUM

SourceCodester Leave Application System User Information index.php authorization

33RISCO

abrir ↗

Referência

CVE-2026-5325

CVE-2026-5325MEDIUM

SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5259

CVE-2026-5259MEDIUM

AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5258

CVE-2026-5258MEDIUM

Sanster IOPaint File Manager file_manager.py _get_file path traversal

33RISCO

abrir ↗

Referência

CVE-2026-5257

CVE-2026-5257MEDIUM

code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5256

CVE-2026-5256MEDIUM

code-projects Simple Laundry System Parameter modify.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-2696

CVE-2026-2696MEDIUM

Export All URLs < 5.1 - Unauthenticated Sensitive Data Exposure

33RISCO

abrir ↗

Referência

CVE-2026-5153

CVE-2026-5153MEDIUM

Tenda CH22 WriteFacMac FormWriteFacMac command injection

33RISCO

abrir ↗

Referência

CVE-2026-5152

CVE-2026-5152HIGH

Tenda CH22 createFileName formCreateFileName stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5150

CVE-2026-5150MEDIUM

code-projects Accounting System Parameter viewin_costumer.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5148

CVE-2026-5148MEDIUM

YunaiV yudao-cloud page sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5147

CVE-2026-5147MEDIUM

YunaiV yudao-cloud get-by-website sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5126

CVE-2026-5126MEDIUM

SourceCodester RSS Feed Parser file_get_contents server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5125

CVE-2026-5125MEDIUM

raine consult-llm-mcp server.ts child_process.execSync os command injection

33RISCO

abrir ↗

Referência

CVE-2019-25655

CVE-2019-25655MEDIUM

Device Monitoring Studio 8.10.00.8925 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2019-25654

CVE-2019-25654HIGH

Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow

41RISCO

abrir ↗

Referência

CVE-2019-25653

CVE-2019-25653MEDIUM

Navicat for Oracle 12.1.15 Password Field Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2018-9155

CVE-2018-9155—

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary we

23RISCO

abrir ↗

Referência✓ VexDay Proof

Woltlab Burning Board 3.0.x - Blind SQL Injection

CVE-2008-0857—webappsphp

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência✓ VexDay Proof

XOOPS Module Classifieds - 'cid' SQL Injection

CVE-2008-0873—webappsphp

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2013-5028

CVE-2013-5028—

SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authen

23RISCO

abrir ↗

Referência

CVE-2013-5038

CVE-2013-5038—

The HOT HOTBOX router with software 2.1.11 allows remote attackers to bypass authentication by configuring a source IP a

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.