Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.813exploits catalogados

35.788CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.549GitHub PoC 14.290VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.549 exploits

Referência

CVE-2026-13521

CVE-2026-13521MEDIUM

SourceCodester Class and Exam Timetabling System preview5.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13520

CVE-2026-13520MEDIUM

itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13519

CVE-2026-13519HIGH

Tenda JD12L NatStaticSetting fromNatStaticSetting stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-13518

CVE-2026-13518HIGH

Tenda JD12L addressNat fromAddressNat stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2016-1721

CVE-2016-1721—

The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges o

23RISCO

abrir ↗

Referência

CVE-2026-13489

CVE-2026-13489LOW

78 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchronization

28RISCO

abrir ↗

Referência

CVE-2026-13488

CVE-2026-13488MEDIUM

SourceCodester Class and Exam Timetabling System preview7.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13487

CVE-2026-13487MEDIUM

SourceCodester Class and Exam Timetabling System archive.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-56786

CVE-2026-56786CRITICAL

RTKLIB 2.4.3 - Out-of-bounds Write in decode_type1033 via Crafted RTCM3 Message

48RISCO

abrir ↗

Referência

CVE-2026-56779

CVE-2026-56779MEDIUM

MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters

33RISCO

abrir ↗

Referência

CVE-2026-56774

CVE-2026-56774MEDIUM

Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID

33RISCO

abrir ↗

Referência

CVE-2026-56770

CVE-2026-56770HIGH

libais 0.15 - Out-of-bounds Vector Access in VdmStream::AddLine via Invalid Sequential Message ID

41RISCO

abrir ↗

Referência

CVE-2026-56769

CVE-2026-56769MEDIUM

Huly Platform - Server-Side Request Forgery via /import Endpoint

33RISCO

abrir ↗

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-4870

CVE-2010-4870—

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2026-9710

CVE-2026-9710HIGH

Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure

41RISCO

abrir ↗

Referência

CVE-2010-4872

CVE-2010-4872—

SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL c

23RISCO

abrir ↗

Referência

CVE-2026-12809

CVE-2026-12809MEDIUM

Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection

33RISCO

abrir ↗

Referência

CVE-2026-12786

CVE-2026-12786HIGH

Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control

41RISCO

abrir ↗

Referência

CVE-2026-12784

CVE-2026-12784HIGH

IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control

41RISCO

abrir ↗

Referência

CVE-2026-12770

CVE-2026-12770MEDIUM

BerriAI litellm Admin Key key_management_endpoints.py improper authorization

33RISCO

abrir ↗

Referência

CVE-2020-37255

CVE-2020-37255HIGH

WordPress Time Capsule Plugin 1.21.16 Authentication Bypass

41RISCO

abrir ↗

Referência

CVE-2018-1121

CVE-2018-1121LOW

procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdir() return

28RISCO

abrir ↗

Referência

CVE-2018-18619

CVE-2018-18619—

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec

23RISCO

abrir ↗

Referência

CVE-2018-18619

CVE-2018-18619—

internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability bec

23RISCO

abrir ↗

Referência

CVE-2017-12952

CVE-2017-12952—

The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer d

23RISCO

abrir ↗

Referência

CVE-2013-1763

CVE-2013-1763—

Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows l

23RISCO

abrir ↗

Referência

CVE-2010-4921

CVE-2010-4921—

SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2013-3535

CVE-2013-3535—

Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra

23RISCO

abrir ↗

Referência

CVE-2014-4312

CVE-2014-4312—

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.