Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.091exploits catalogados

35.949CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.396VulnCheck XDB 8.755Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-6030

CVE-2026-6030MEDIUM

itsourcecode Construction Management System del1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-6029

CVE-2026-6029CRITICAL

Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6028

CVE-2026-6028CRITICAL

Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6027

CVE-2026-6027CRITICAL

Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection

48RISCO

abrir ↗

Referência

CVE-2026-4432

CVE-2026-4432MEDIUM

YITH WooCommerce Wishlist < 4.13.0 - Unauthenticated Arbitrary Wishlist Renaming via IDOR

33RISCO

abrir ↗

Referência

CVE-2025-14545

CVE-2025-14545MEDIUM

YML for Yandex Market < 5.0.26 - Shop Manager+ RCE via Feed Generation

33RISCO

abrir ↗

Referência

CVE-2026-6026

CVE-2026-6026CRITICAL

Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6025

CVE-2026-6025CRITICAL

Totolink A7100RU CGI cstecgi.cgi setSyslogCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-6024

CVE-2026-6024MEDIUM

Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal

33RISCO

abrir ↗

Referência

CVE-2026-6016

CVE-2026-6016HIGH

Tenda AC9 POST Request WizardHandle decodePwd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-6015

CVE-2026-6015HIGH

Tenda AC9 POST Request QuickIndex formQuickIndex stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2018-25287

CVE-2018-25287MEDIUM

Drive Power Manager 1.10 Denial of Service via Name Field

33RISCO

abrir ↗

Referência

CVE-2018-25286

CVE-2018-25286MEDIUM

Easy PhotoResQ 1.0 Buffer Overflow Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25285

CVE-2018-25285MEDIUM

Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow

33RISCO

abrir ↗

Referência

CVE-2018-25284

CVE-2018-25284MEDIUM

HD Tune Pro 5.70 Denial of Service via Options Dialog

33RISCO

abrir ↗

Referência

CVE-2018-25283

CVE-2018-25283HIGH

iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter

41RISCO

abrir ↗

Referência

CVE-2018-25282

CVE-2018-25282MEDIUM

Nmap 7.70 Denial of Service via XML Entity Expansion

33RISCO

abrir ↗

Referência

CVE-2018-25281

CVE-2018-25281MEDIUM

iCash 7.6.5 Denial of Service via Connect to Server

33RISCO

abrir ↗

Referência

CVE-2018-25280

CVE-2018-25280MEDIUM

Infiltrator Network Security Scanner 4.6 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25279

CVE-2018-25279MEDIUM

jiNa OCR Image to Text 1.0 Denial of Service via PNG

33RISCO

abrir ↗

Referência

CVE-2018-25278

CVE-2018-25278MEDIUM

PicaJet FX 2.6.5 Denial of Service via Registration Fields

33RISCO

abrir ↗

Referência

CVE-2026-5806

CVE-2026-5806MEDIUM

code-projects Easy Blog Site update.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-5805

CVE-2026-5805MEDIUM

code-projects Easy Blog Site contact_us.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5803

CVE-2026-5803MEDIUM

bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5802

CVE-2026-5802MEDIUM

idachev mcp-javadc HTTP os command injection

33RISCO

abrir ↗

Referência

CVE-2026-4338

CVE-2026-4338HIGH

ActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts Disclosure

41RISCO

abrir ↗

Referência

CVE-2026-5741

CVE-2026-5741MEDIUM

suvarchal docker-mcp-server HTTP index.ts pull_image os command injection

33RISCO

abrir ↗

Referência

CVE-2026-15526

CVE-2026-15526MEDIUM

augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal

33RISCO

abrir ↗

Referência

CVE-2026-15478

CVE-2026-15478MEDIUM

IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-0971

CVE-2018-0971—

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informatio

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.