Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-5418

CVE-2026-5418MEDIUM

appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5559

CVE-2026-5559MEDIUM

AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine

33RISCO

abrir ↗

Referência

CVE-2026-5558

CVE-2026-5558MEDIUM

PHPGurukul PHPGurukul Online Shopping Portal Project Parameter pending-orders.php sql injection

33RISCO

abrir ↗

Referência

CVE-2018-25251

CVE-2018-25251HIGH

Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket

41RISCO

abrir ↗

Referência

CVE-2018-25250

CVE-2018-25250MEDIUM

MyBB Last User's Threads in Profile Plugin 1.2 Persistent XSS

33RISCO

abrir ↗

Referência

CVE-2018-25249

CVE-2018-25249MEDIUM

MyBB My Arcade Plugin 1.3 Persistent XSS via Comment

33RISCO

abrir ↗

Referência

CVE-2018-25248

CVE-2018-25248MEDIUM

MyBB Downloads Plugin 2.0.3 Persistent XSS via downloads.php

33RISCO

abrir ↗

Referência

CVE-2018-25247

CVE-2018-25247MEDIUM

MyBB Like Plugin 3.0.0 Cross-Site Scripting via User Profiles

33RISCO

abrir ↗

Referência

CVE-2018-25245

CVE-2018-25245HIGH

7 Tik 1.0.1.0 Denial of Service via Search

41RISCO

abrir ↗

Referência

CVE-2018-25244

CVE-2018-25244MEDIUM

Eco Search 1.0.2.0 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25243

CVE-2018-25243MEDIUM

FastTube 1.0.1.0 Denial of Service via Search

33RISCO

abrir ↗

Referência

CVE-2018-25242

CVE-2018-25242MEDIUM

One Search 1.1.0.0 Denial of Service

33RISCO

abrir ↗

Referência

CVE-2018-25241

CVE-2018-25241HIGH

VPN Browser+ 1.1.0.0 Denial of Service

41RISCO

abrir ↗

Referência

CVE-2026-75082

CVE-2026-75082MEDIUM

Webkul Bagisto Customer-Registration Notification Email register cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-19478

CVE-2026-19478CRITICAL

Improper Control of Generation of Code ('Code Injection') in GitLab

63RISCO

abrir ↗

Referência

CVE-2026-19963

CVE-2026-19963MEDIUM

Edimax EW-7478APC stainfo command injection

33RISCO

abrir ↗

Referência

CVE-2026-19962

CVE-2026-19962MEDIUM

Edimax EW-7478APC setWAN command injection

33RISCO

abrir ↗

Referência

CVE-2026-19957

CVE-2026-19957MEDIUM

graphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2026-5198

CVE-2026-5198MEDIUM

code-projects Student Membership System Admin Login index.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5197

CVE-2026-5197MEDIUM

code-projects Student Membership System delete_user.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5196

CVE-2026-5196MEDIUM

code-projects Student Membership System delete_member.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-5184

CVE-2026-5184MEDIUM

TRENDnet TEW-713RE setSysAdm command injection

33RISCO

abrir ↗

Referência

CVE-2026-3881

CVE-2026-3881MEDIUM

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

33RISCO

abrir ↗

Referência

CVE-2026-5183

CVE-2026-5183MEDIUM

TRENDnet TEW-713RE addRouting sub_421494 command injection

33RISCO

abrir ↗

Referência

CVE-2026-16594

CVE-2026-16594HIGH

WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure

41RISCO

abrir ↗

Referência

CVE-2026-19190

CVE-2026-19190HIGH

StableBit Scanner ScannerService Scanner.Service.exe permission

41RISCO

abrir ↗

Referência

CVE-2018-10576

CVE-2018-10576—

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentica

23RISCO

abrir ↗

Referência

CVE-2026-11962

CVE-2026-11962HIGH

FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations

41RISCO

abrir ↗

Referência

CVE-2026-70616

CVE-2026-70616HIGH

boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint

41RISCO

abrir ↗

Referência

CVE-2026-14771

CVE-2026-14771MEDIUM

SourceCodester Class and Exam Timetabling System edit_exam1.php sql injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.