Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.401exploits catalogados

35.511CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

22.332 exploits

Referência

CVE-2018-25405

CVE-2018-25405HIGH

eNdonesia Portal 8.7 SQL Injection via mod.php

41RISCO

abrir ↗

Referência

CVE-2026-10115

CVE-2026-10115MEDIUM

Open5GS Shared NF-profile nnrf-handler.c denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10114

CVE-2026-10114MEDIUM

Open5GS Shared NF-profile nnrf-handler.c handle_scp_info out-of-bounds write

33RISCO

abrir ↗

Referência

CVE-2026-10113

CVE-2026-10113MEDIUM

Open5GS Shared NF-profile nnrf-handler.c denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10112

CVE-2026-10112MEDIUM

sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-10111

CVE-2026-10111MEDIUM

sambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10110

CVE-2026-10110MEDIUM

code-projects Student Details Management System index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-44420

CVE-2026-44420HIGH

FreeRDP cliprdr server heap-buffer-overflow via undersized capabilitySetLength in CB_CLIP_CAPS

41RISCO

abrir ↗

Referência

CVE-2018-25398

CVE-2018-25398HIGH

The Open ISES Project 3.30A SQL Injection via main.php

41RISCO

abrir ↗

Referência

CVE-2018-25397

CVE-2018-25397MEDIUM

PHP-SHOP 1.0 Cross-Site Request Forgery via users.php

33RISCO

abrir ↗

Referência

CVE-2018-25396

CVE-2018-25396HIGH

Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm

41RISCO

abrir ↗

Referência

CVE-2018-25395

CVE-2018-25395HIGH

Kados R10 GreenBee SQL Injection via update_feature.php

41RISCO

abrir ↗

Referência

CVE-2019-0539

CVE-2019-0539—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

Referência

CVE-2019-0539

CVE-2019-0539—

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

abrir ↗

Referência

CVE-2026-32848

CVE-2026-32848MEDIUM

NetBSD cryptodev Race Condition Double-Free via cryptodev_op()

33RISCO

abrir ↗

Referência

CVE-2026-32849

CVE-2026-32849MEDIUM

NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c

33RISCO

abrir ↗

Referência

CVE-2018-25391

CVE-2018-25391HIGH

HaPe PKH 1.1 Missing Authorization Allows Unauthenticated Record Deletion

41RISCO

abrir ↗

Referência

CVE-2018-25390

CVE-2018-25390HIGH

HaPe PKH 1.1 SQL Injection via desa Parameter

41RISCO

abrir ↗

Referência

CVE-2026-9807

CVE-2026-9807MEDIUM

Incorrect Authorization in GitLab

33RISCO

abrir ↗

Referência

CVE-2026-6268

CVE-2026-6268HIGH

EventPress < 22.2 – Reflected Cross-Site Scripting

41RISCO

abrir ↗

Referência

CVE-2026-9603

CVE-2026-9603MEDIUM

SourceCodester eDoc Doctor Appointment System delete-session.php authorization

33RISCO

abrir ↗

Referência

CVE-2026-9484

CVE-2026-9484MEDIUM

SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9483

CVE-2026-9483MEDIUM

SourceCodester Student Grades Management System grades.php improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9479

CVE-2026-9479HIGH

Edimax EW-7438RPn formLogout stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9581

CVE-2026-9581MEDIUM

JeecgBoot add access control

33RISCO

abrir ↗

Referência

CVE-2026-9542

CVE-2026-9542MEDIUM

CodeAstro Leave Management System add_staff.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9541

CVE-2026-9541MEDIUM

Squirrel Cnut File sqobject.cpp ReadObject heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-9540

CVE-2026-9540MEDIUM

vllm-project vllm OpenAI-compatible Serving Path denial of service

33RISCO

abrir ↗

Referência

CVE-2026-9534

CVE-2026-9534MEDIUM

Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection

38RISCO

abrir ↗

Referência

CVE-2026-9533

CVE-2026-9533MEDIUM

Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection

38RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.