Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

21.899 exploits

Referência✓ VexDay Proof

impleo music Collection 2.0 - SQL Injection / Cross-Site Scripting

CVE-2009-2154—webappsphp

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

TorrentTrader Classic 1.09 - Multiple Vulnerabilities

CVE-2009-2160—webappsphp

TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpin

23RISCO

abrir ↗

Referência

CVE-2026-9434

CVE-2026-9434CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWiFiWpsCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9433

CVE-2026-9433CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setMacFilterRules os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9432

CVE-2026-9432CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9431

CVE-2026-9431HIGH

Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9430

CVE-2026-9430HIGH

Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9429

CVE-2026-9429HIGH

Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9426

CVE-2026-9426HIGH

Edimax EW-7438RPn formHwSet stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2026-9414

CVE-2026-9414MEDIUM

SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9413

CVE-2026-9413MEDIUM

SourceCodester Indian Invoicing System category.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-9412

CVE-2026-9412MEDIUM

SourceCodester Indian Invoicing System Backend Endpoint access control

33RISCO

abrir ↗

Referência

CVE-2026-9411

CVE-2026-9411MEDIUM

SourceCodester Indian Invoicing System Invoice Generation IGST_Invoice.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-9410

CVE-2026-9410MEDIUM

Sushmi-pal Invoice-System Profile Workflow profile improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9405

CVE-2026-9405CRITICAL

Totolink A8000RU Web Management cstecgi.cgi setGameSpeedCfg os command injection

48RISCO

abrir ↗

Referência

CVE-2026-9402

CVE-2026-9402MEDIUM

Edimax BR-6675nD POST Request formWlanMP command injection

33RISCO

abrir ↗

Referência

CVE-2026-9401

CVE-2026-9401HIGH

Edimax BR-6675nD POST Request formWanTcpipSetup buffer overflow

41RISCO

abrir ↗

Referência✓ VexDay Proof

Kjtechforce mailman b1 - 'dest' Blind SQL Injection

CVE-2009-2164—webappsphp

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

Kjtechforce mailman b1 - Delete Row 'code' SQL Injection

CVE-2009-2164—webappsphp

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magic_quotes_gpc is disabled, allow remote att

23RISCO

abrir ↗

Referência✓ VexDay Proof

LushiNews 1.01 - 'comments.php' SQL Injection

CVE-2007-0865—webappsphp

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject ar

23RISCO

abrir ↗

Referência

CVE-2018-0296

CVE-2018-0296HIGHsob ataque

A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo

100RISCO

abrir ↗

Referência

CVE-2021-22986

CVE-2021-22986CRITICALsob ataqueransomware

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RISCO

abrir ↗

Referência

CVE-2021-22986

CVE-2021-22986CRITICALsob ataqueransomware

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

100RISCO

abrir ↗

Referência

CVE-2009-2735

CVE-2009-2735—

SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote at

23RISCO

abrir ↗

Referência

CVE-2009-2774

CVE-2009-2774—

SQL injection vulnerability in paidbanner.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2009-2775

CVE-2009-2775—

SQL injection vulnerability in linkout.php in PHPArcadeScript (PHP Arcade Script) 4.0 allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2009-2779

CVE-2009-2779—

SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2009-2788

CVE-2009-2788—

Multiple SQL injection vulnerabilities in Mobilelib GOLD 3 allow remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

Connectix Boards 0.7 - 'p_skin' Multiple Vulnerabilities

CVE-2007-1254—webappsphp

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated user

23RISCO

abrir ↗

Referência✓ VexDay Proof

PHP 4.4.6 - 'crack_opendict()' Local Buffer Overflow

CVE-2007-1401—localwindows

Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allo

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.