Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2026-13553

CVE-2026-13553MEDIUM

itsourcecode Online Hotel Management System controller.php add unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2011-0611

CVE-2011-0611HIGHsob ataque

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; A

100RISCO

abrir ↗

Referência

CVE-2013-3214

CVE-2013-3214—

vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vulnerability in 'vtigerolservice.php'.

60RISCO

abrir ↗

Referência

CVE-2026-13549

CVE-2026-13549MEDIUM

CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization

33RISCO

abrir ↗

Referência

CVE-2026-13546

CVE-2026-13546MEDIUM

Feehi CMS REST API Endpoint articles missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-5832

CVE-2026-5832MEDIUM

atototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5830

CVE-2026-5830HIGH

Tenda AC15 SysToolChangePwd websGetVar stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5829

CVE-2026-5829MEDIUM

code-projects Simple IT Discussion Forum content.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5828

CVE-2026-5828MEDIUM

code-projects Simple IT Discussion Forum addcomment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5827

CVE-2026-5827MEDIUM

code-projects Simple IT Discussion Forum question-function.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5826

CVE-2026-5826MEDIUM

code-projects Simple IT Discussion Forum edit-category.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5705

CVE-2026-5705MEDIUM

code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5691

CVE-2026-5691MEDIUM

Totolink A7100RU cstecgi.cgi setFirewallType os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5690

CVE-2026-5690MEDIUM

Totolink A7100RU cstecgi.cgi setRemoteCfg os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5689

CVE-2026-5689MEDIUM

Totolink A7100RU cstecgi.cgi setNtpCfg os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5688

CVE-2026-5688MEDIUM

Totolink A7100RU cstecgi.cgi setDdnsCfg os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5687

CVE-2026-5687HIGH

Tenda CX12L NatStaticSetting fromNatStaticSetting stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5686

CVE-2026-5686HIGH

Tenda CX12L RouteStatic fromRouteStatic stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5685

CVE-2026-5685HIGH

Tenda CX12L addressNat fromAddressNat stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5684

CVE-2026-5684HIGH

Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-5683

CVE-2026-5683MEDIUM

Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-5682

CVE-2026-5682MEDIUM

Meesho Online Shopping App com.meesho.supply endpoint risky encryption

33RISCO

abrir ↗

Referência

CVE-2026-5681

CVE-2026-5681MEDIUM

itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5679

CVE-2026-5679MEDIUM

Totolink A3300R cstecgi.cgi vsetTr069Cfg os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5678

CVE-2026-5678MEDIUM

Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5677

CVE-2026-5677MEDIUM

Totolink A7100RU cstecgi.cgi CsteSystem os command injection

33RISCO

abrir ↗

Referência

CVE-2026-5676

CVE-2026-5676MEDIUM

Totolink A8000R cstecgi.cgi setLanguageCfg missing authentication

33RISCO

abrir ↗

Referência

CVE-2026-5675

CVE-2026-5675MEDIUM

itsourcecode Construction Management System Parameter borrowed_tool.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5672

CVE-2026-5672MEDIUM

code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5671

CVE-2026-5671MEDIUM

Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.