Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2026-9300

CVE-2026-9300MEDIUM

omec-project amf NGSetupRequest memory corruption

33RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCC 4.2 Beta - 'nickpage.php?npid' SQL Injection

CVE-2007-0985—webappsphp

SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.02 - 'showonly' Blind SQL Injection

CVE-2007-1019—webappsphp

SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-5024

CVE-2010-5024—

SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5027

CVE-2010-5027—

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote a

23RISCO

abrir ↗

Referência

CVE-2026-14688

CVE-2026-14688MEDIUM

itsourcecode Online Hotel Management System login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14687

CVE-2026-14687MEDIUM

666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

33RISCO

abrir ↗

Referência

CVE-2026-14686

CVE-2026-14686MEDIUM

HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison

33RISCO

abrir ↗

Referência

CVE-2026-14685

CVE-2026-14685MEDIUM

HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue

33RISCO

abrir ↗

Referência

CVE-2026-14684

CVE-2026-14684MEDIUM

HdrHistogram AbstractHistogram.java memory allocation

33RISCO

abrir ↗

Referência

CVE-2026-14683

CVE-2026-14683MEDIUM

HdrHistogram AbstractHistogram.java memory allocation

33RISCO

abrir ↗

Referência

CVE-2026-14660

CVE-2026-14660MEDIUM

code-projects Online Job Portal login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14659

CVE-2026-14659MEDIUM

itsourcecode Hospital Management System patientappointment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2010-5027

CVE-2010-5027—

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-5029

CVE-2010-5029—

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2026-57517

CVE-2026-57517CRITICAL

Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

48RISCO

abrir ↗

Referência

CVE-2026-58127

CVE-2026-58127CRITICAL

PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

48RISCO

abrir ↗

Referência

CVE-2010-5284

CVE-2010-5284—

Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s

23RISCO

abrir ↗

Referência

CVE-2010-5322

CVE-2010-5322—

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2010-5322

CVE-2010-5322—

Cross-site scripting (XSS) vulnerability in ZeusCart 4.0 and earlier allows remote attackers to inject arbitrary web scr

23RISCO

abrir ↗

Referência

CVE-2011-0005

CVE-2011-0005—

Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attacke

23RISCO

abrir ↗

Referência

CVE-2026-8086

CVE-2026-8086MEDIUM

OSGeo gdal SWapi.c SWnentries heap-based overflow

33RISCO

abrir ↗

Referência

CVE-2026-8084

CVE-2026-8084MEDIUM

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2026-8084

CVE-2026-8084MEDIUM

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2026-42284

CVE-2026-42284HIGH

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

41RISCO

abrir ↗

Referência

CVE-2026-8083

CVE-2026-8083MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8081

CVE-2026-8081MEDIUM

router-for-me CLIProxyAPI api_tools.go server-side request forgery

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.