Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.608exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 13.975VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection

CVE-2009-0373—webappsphp

SQL injection vulnerability in the ElearningForce Flash Magazine Deluxe (com_flashmagazinedeluxe) component for Joomla!

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component beamospetition 1.0.12 - SQL Injection / Cross-Site Scripting

CVE-2009-0377—webappsphp

SQL injection vulnerability in the beamospetition (com_beamospetition) 1.0.12 component for Joomla! allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Com BazaarBuilder Shopping Cart 5.0 - SQL Injection

CVE-2009-0381—webappsphp

SQL injection vulnerability in the BazaarBuilder Ecommerce Shopping Cart (com_prod) 5.0 component for Joomla! allows rem

23RISCO

abrir ↗

Referência✓ VexDay Proof

OwnRS Blog 1.2 - 'autor.php' SQL Injection

CVE-2009-0384—webappsphp

SQL injection vulnerability in autor.php in OwnRS CMS 1.2 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

TightVNC - Authentication Failure Integer Overflow (PoC)

CVE-2009-0388—doswindows

Multiple integer signedness errors in (1) UltraVNC 1.0.2 and 1.0.5 and (2) TightVnc 1.3.9 allow remote VNC servers to ca

28RISCO

abrir ↗

Referência✓ VexDay Proof

FreeForum 0.9.7 - 'forum.php' Remote File Inclusion

CVE-2006-5230—webappsphp

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2023-32315

CVE-2023-32315HIGHsob ataque

Openfire administration console authentication bypass

100RISCO

abrir ↗

Referência✓ VexDay Proof

Motorola Wimax modem CPEi300 - File Disclosure / Cross-Site Scripting

CVE-2009-0393—remotehardware

Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

Netartmedia Car Portal 1.0 - Authentication Bypass

CVE-2009-0395—webappsphp

SQL injection vulnerability in the login feature in NetArt Media Car Portal 1.0 allows remote attackers to execute arbit

23RISCO

abrir ↗

Referência✓ VexDay Proof

SmartSiteCMS 1.0 - Blind SQL Injection

CVE-2009-0405—webappsphp

SQL injection vulnerability in articles.php in smartSite CMS 1.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2026-10268

CVE-2026-10268MEDIUM

janet-lang janet marsh.c unmarshal_one_fiber integer overflow

33RISCO

abrir ↗

Referência

CVE-2026-10267

CVE-2026-10267MEDIUM

janet-lang janet debug.c doframe out-of-bounds

33RISCO

abrir ↗

Referência

CVE-2026-48559

CVE-2026-48559MEDIUM

Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags

33RISCO

abrir ↗

Referência

CVE-2026-10260

CVE-2026-10260MEDIUM

CodeAstro Online Job Portal delete-jobs.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10259

CVE-2026-10259HIGH

H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-10258

CVE-2026-10258MEDIUM

itsourcecode Content Management System add_sub_topic.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-10253

CVE-2026-10253MEDIUM

itsourcecode Online House Rental System manage_payment.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

Community CMS 0.4 - 'id' Blind SQL Injection

CVE-2009-0406—webappsphp

SQL injection vulnerability in index.php in Community CMS 0.4 and earlier allows remote attackers to execute arbitrary S

23RISCO

abrir ↗

Referência✓ VexDay Proof

phpList 2.10.8 - Local File Inclusion

CVE-2009-0422—webappsphp

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when register_globals is dis

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Photo Album 0.8b - 'preview' Local File Inclusion

CVE-2009-0423—webappsphp

Directory traversal vulnerability in index.php in Php Photo Album (PHPPA) 0.8 BETA allows remote attackers to include an

23RISCO

abrir ↗

Referência✓ VexDay Proof

Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection

CVE-2009-0425—webappsphp

SQL injection vulnerability in index.php in Blue Eye CMS 1.0.0 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2024-3273

CVE-2024-3273HIGHsob ataque

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

100RISCO

abrir ↗

Referência✓ VexDay Proof

DMXReady Classified Listings Manager 1.1 - SQL Injection

CVE-2009-0426—webappsasp

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Classified Listings Manager 1.1 and

23RISCO

abrir ↗

Referência✓ VexDay Proof

DMXReady Member Directory Manager 1.1 - SQL Injection

CVE-2009-0427—webappsasp

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Member Directory Manager 1.1 and ea

23RISCO

abrir ↗

Referência✓ VexDay Proof

DMXReady Secure Document Library 1.1 - SQL Injection

CVE-2009-0428—webappsphp

SQL injection vulnerability in CategoryManager/upload_image_category.asp in DMXReady Secure Document Library 1.1 and ear

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion

CVE-2009-0442—webappsphp

Directory traversal vulnerability in bbcode.php in PHPbbBook 1.3 and 1.3h allows remote attackers to include and execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

Elecard AVC HD player - '.m3u' / '.xpl' Local Stack Overflow (PoC)

CVE-2009-0443—doswindows

Stack-based buffer overflow in Elecard AVC HD PLAYER 5.5.90116 allows remote attackers to execute arbitrary code via an

23RISCO

abrir ↗

Referência✓ VexDay Proof

WEBalbum 2.4b - 'id' Blind SQL Injection

CVE-2009-0446—webappsphp

SQL injection vulnerability in photo.php in WEBalbum 2.4b allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

MyDesing Sayac 2.0 - Authentication Bypass

CVE-2009-0447—webappsasp

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência✓ VexDay Proof

BlazeVideo HDTV Player 3.5 - '.PLF' Playlist File Local Overflow

CVE-2009-0450—localwindows

Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.