Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.302exploits catalogados

35.469CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.301 exploits

Referência

CVE-2023-54353

CVE-2023-54353HIGH

Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

41RISCO

abrir ↗

Referência

CVE-2016-20071

CVE-2016-20071HIGH

WordPress 404 Redirection Manager Plugin 1.0 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2016-20070

CVE-2016-20070MEDIUM

WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS

33RISCO

abrir ↗

Referência

CVE-2026-10811

CVE-2026-10811MEDIUM

itsourcecode Fees Management System receipt.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-9445

CVE-2018-9445—

In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local

23RISCO

abrir ↗

Referência

CVE-2018-9488

CVE-2018-9488—

In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead

23RISCO

abrir ↗

Referência

CVE-2026-10550

CVE-2026-10550MEDIUM

elunez eladmin Application Deployment App.java command injection

33RISCO

abrir ↗

Referência

CVE-2026-10548

CVE-2026-10548MEDIUM

NousResearch hermes-agent Credential Pool Synchronization credential_pool.py _sync_anthropic_entry_from_credentials_file improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10301

CVE-2026-10301MEDIUM

itsourcecode Fees Management System index.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10295

CVE-2026-10295MEDIUM

SourceCodester Customer Review App review_app.py get_all_reviews denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10292

CVE-2026-10292HIGH

UTT HiPER 1200GW formTaskEdit strcpy stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10290

CVE-2026-10290MEDIUM

code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10289

CVE-2026-10289MEDIUM

code-projects Hotel and Tourism Reservation System tour.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10288

CVE-2026-10288MEDIUM

code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

33RISCO

abrir ↗

Referência

CVE-2026-10286

CVE-2026-10286MEDIUM

CodeAstro Payroll System home_employee.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-12189

CVE-2026-12189MEDIUM

Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme

33RISCO

abrir ↗

Referência

CVE-2026-12187

CVE-2026-12187HIGH

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

41RISCO

abrir ↗

Referência

CVE-2026-12186

CVE-2026-12186HIGH

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

41RISCO

abrir ↗

Referência

CVE-2025-15546

CVE-2025-15546MEDIUM

Iptanus File Upload < 5.1.7 - File Overwrite via Race Condition

33RISCO

abrir ↗

Referência

CVE-2026-12174

CVE-2026-12174HIGH

D-Link DCS-935L HTTP rhea snprintf format string

41RISCO

abrir ↗

Referência

CVE-2026-25557

CVE-2026-25557MEDIUM

Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter

33RISCO

abrir ↗

Referência

CVE-2004-0798

CVE-2004-0798—

Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to

50RISCO

abrir ↗

Referência

CVE-2026-11621

CVE-2026-11621MEDIUM

Dcat-Admin User Setting upload editorMDUpload unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-11584

CVE-2026-11584MEDIUM

CodeAstro Student Attendance Management System createClass.php edit sql injection

33RISCO

abrir ↗

Referência

CVE-2026-11583

CVE-2026-11583MEDIUM

CodeAstro Student Attendance Management System createClass.php sql injection

33RISCO

abrir ↗

Referência

CVE-2019-0541

CVE-2019-0541HIGHsob ataque

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML E

83RISCO

abrir ↗

Referência

CVE-2026-9562

CVE-2026-9562MEDIUM

sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control

33RISCO

abrir ↗

Referência

CVE-2026-11312

CVE-2026-11312MEDIUM

bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

33RISCO

abrir ↗

Referência

CVE-2026-10878

CVE-2026-10878MEDIUM

D-Link DWR-M920 formSmsManage sub_41C8E8 command injection

33RISCO

abrir ↗

Referência

CVE-2026-9544

CVE-2026-9544MEDIUM

Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.