Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados

34.679CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

21.692 exploits

Referência

CVE-2026-9302

CVE-2026-9302MEDIUM

546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-9301

CVE-2026-9301MEDIUM

omec-project amf NGReset Message memory corruption

33RISCO

abrir ↗

Referência

CVE-2026-9300

CVE-2026-9300MEDIUM

omec-project amf NGSetupRequest memory corruption

33RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCC 4.2 Beta - 'nickpage.php?npid' SQL Injection

CVE-2007-0985—webappsphp

SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

webSPELL 4.01.02 - 'showonly' Blind SQL Injection

CVE-2007-1019—webappsphp

SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-5024

CVE-2010-5024—

SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5027

CVE-2010-5027—

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote a

23RISCO

abrir ↗

Referência

CVE-2026-14688

CVE-2026-14688MEDIUM

itsourcecode Online Hotel Management System login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14687

CVE-2026-14687MEDIUM

666ghj BettaFish InsightEngine search-result Deduplication agent.py _deduplicate_results partial string comparison

33RISCO

abrir ↗

Referência

CVE-2026-14686

CVE-2026-14686MEDIUM

HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison

33RISCO

abrir ↗

Referência

CVE-2026-14685

CVE-2026-14685MEDIUM

HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue

33RISCO

abrir ↗

Referência

CVE-2026-14684

CVE-2026-14684MEDIUM

HdrHistogram AbstractHistogram.java memory allocation

33RISCO

abrir ↗

Referência

CVE-2026-14683

CVE-2026-14683MEDIUM

HdrHistogram AbstractHistogram.java memory allocation

33RISCO

abrir ↗

Referência

CVE-2026-14660

CVE-2026-14660MEDIUM

code-projects Online Job Portal login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14659

CVE-2026-14659MEDIUM

itsourcecode Hospital Management System patientappointment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2010-5027

CVE-2010-5027—

Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote a

23RISCO

abrir ↗

Referência

CVE-2010-5029

CVE-2010-5029—

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2010-5032

CVE-2010-5032—

SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-5033

CVE-2010-5033—

SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-5034

CVE-2010-5034—

SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência

CVE-2010-5035

CVE-2010-5035—

Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-5035

CVE-2010-5035—

Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-5036

CVE-2010-5036—

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-5036

CVE-2010-5036—

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2010-5037

CVE-2010-5037—

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-5037

CVE-2010-5037—

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.