Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2010-5009

CVE-2010-5009—

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-5010

CVE-2010-5010—

Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2010-5011

CVE-2010-5011—

SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-5011

CVE-2010-5011—

SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-5012

CVE-2010-5012—

SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2010-5012

CVE-2010-5012—

SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência

CVE-2018-25381

CVE-2018-25381HIGH

Joomla Responsive Portfolio 1.6.1 SQL Injection via filter parameters

41RISCO

abrir ↗

Referência

CVE-2010-5013

CVE-2010-5013—

SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem

23RISCO

abrir ↗

Referência

CVE-2010-5013

CVE-2010-5013—

SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows rem

23RISCO

abrir ↗

Referência

CVE-2010-5014

CVE-2010-5014—

SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-5015

CVE-2010-5015—

SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-5019

CVE-2010-5019—

SQL injection vulnerability in view_photo.php in 2daybiz Online Classified Script allows remote attackers to execute arb

23RISCO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5021

CVE-2010-5021—

SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5022

CVE-2010-5022—

SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at

23RISCO

abrir ↗

Referência

CVE-2010-5023

CVE-2010-5023—

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2010-5023

CVE-2010-5023—

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2018-1122

CVE-2018-1122HIGH

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset

41RISCO

abrir ↗

Referência

CVE-2026-14695

CVE-2026-14695MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14694

CVE-2026-14694MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php cancel_order sql injection

33RISCO

abrir ↗

Referência

CVE-2026-14693

CVE-2026-14693MEDIUM

SourceCodester Multi-Vendor Online Grocery Management System Master.php cancel_order improper authorization

33RISCO

abrir ↗

Referência

CVE-2026-9302

CVE-2026-9302MEDIUM

546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection

33RISCO

abrir ↗

Referência

CVE-2026-9301

CVE-2026-9301MEDIUM

omec-project amf NGReset Message memory corruption

33RISCO

abrir ↗

Referência

CVE-2026-9300

CVE-2026-9300MEDIUM

omec-project amf NGSetupRequest memory corruption

33RISCO

abrir ↗

Referência

CVE-2010-5024

CVE-2010-5024—

SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, wi

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2010-5026

CVE-2010-5026—

SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to e

23RISCO

abrir ↗

Referência

CVE-2018-11502

CVE-2018-11502—

An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display t

23RISCO

abrir ↗

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RISCO

abrir ↗

Referência

CVE-2018-11510

CVE-2018-11510—

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.