Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2026-78145

CVE-2026-78145MEDIUM

CTFd __init__.py _is_safe_url redirect

30RISCO

abrir ↗

Referência

CVE-2012-4901

CVE-2012-4901—

Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary w

23RISCO

abrir ↗

Referência✓ VexDay Proof

PowerClan 1.14a - Authentication Bypass

CVE-2009-0707—webappsphp

SQL injection vulnerability in admin/index.php in PowerClan 1.14a allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2009-5102

CVE-2009-5102—

SQL injection vulnerability in default.asp in ATCOM Netvolution 1.0 ASP allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2015-5754

CVE-2015-5754—

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 all

23RISCO

abrir ↗

Referência

CVE-2010-2133

CVE-2010-2133—

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-2133

CVE-2010-2133—

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2026-78144

CVE-2026-78144MEDIUM

code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization

30RISCO

abrir ↗

Referência✓ VexDay Proof

Realty Web-Base 1.0 - Authentication Bypass

CVE-2009-1658—webappsphp

Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remot

23RISCO

abrir ↗

Referência

CVE-2009-3181

CVE-2009-3181—

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via

23RISCO

abrir ↗

Referência

CVE-2026-78143

CVE-2026-78143MEDIUM

code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

30RISCO

abrir ↗

Referência✓ VexDay Proof

PHP Blue Dragon CMS 2.9 - Remote File Inclusion

CVE-2006-2392—webappsphp

PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.

23RISCO

abrir ↗

Referência

CVE-2016-5809

CVE-2016-5809—

An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series

23RISCO

abrir ↗

Referência

CVE-2016-9950

CVE-2016-9950—

An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and

28RISCO

abrir ↗

Referência

CVE-2026-78142

CVE-2026-78142MEDIUM

code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization

30RISCO

abrir ↗

Referência

CVE-2010-1583

CVE-2010-1583—

SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tzn_mysql.php in Tirzen (aka TZN)

23RISCO

abrir ↗

Referência

CVE-2026-10053

CVE-2026-10053HIGH

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

41RISCO

abrir ↗

Referência

CVE-2010-3154

CVE-2010-3154—

Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attac

28RISCO

abrir ↗

Referência✓ VexDay Proof

CMS NetCat 3.12 - Multiple Vulnerabilities

CVE-2008-5742—webappsphp

Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbit

23RISCO

abrir ↗

Referência

CVE-2026-78112

CVE-2026-78112MEDIUM

itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

33RISCO

abrir ↗

Referência✓ VexDay Proof

PHPfan 3.3.4 - 'init.php' Remote File Inclusion

CVE-2008-6251—webappsphp

PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrar

23RISCO

abrir ↗

Referência

CVE-2012-10044

CVE-2012-10044CRITICAL

MobileCartly 1.0 savepage.php Arbitrary File Creation

63RISCO

abrir ↗

Referência

CVE-2012-10044

CVE-2012-10044CRITICAL

MobileCartly 1.0 savepage.php Arbitrary File Creation

63RISCO

abrir ↗

Referência

CVE-2012-10044

CVE-2012-10044CRITICAL

MobileCartly 1.0 savepage.php Arbitrary File Creation

63RISCO

abrir ↗

Referência

CVE-2010-2909

CVE-2010-2909—

SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attacker

23RISCO

abrir ↗

Referência✓ VexDay Proof

Intel 2200BG 802.11 - disassociation packet Kernel Memory Corruption

CVE-2007-0686—doswindows

The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of servi

23RISCO

abrir ↗

Referência

CVE-2026-77116

CVE-2026-77116MEDIUM

Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview

33RISCO

abrir ↗

Referência

CVE-2026-77115

CVE-2026-77115HIGH

Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters

41RISCO

abrir ↗

Referência✓ VexDay Proof

OpenInvoice 0.9 - Arbitrary Change User Password

CVE-2008-6524—webappsphp

resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrar

23RISCO

abrir ↗

Referência

CVE-2015-5736

CVE-2015-5736—

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.