Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.900exploits catalogados

35.840CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentes populares risco

22.600 exploits

Referência

CVE-2026-14700

CVE-2026-14700MEDIUM

code-projects Internship Management System Employer Login Endpoint login.php sql injection

33RISCO

abrir ↗

Referência

CVE-2021-39144

CVE-2021-39144HIGHsob ataque

XStream is vulnerable to a Remote Command Execution attack

100RISCO

abrir ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2014-9415

CVE-2014-9415—

Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QE

23RISCO

abrir ↗

Referência

CVE-2014-9416

CVE-2014-9416—

Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute

23RISCO

abrir ↗

Referência

CVE-2014-9417

CVE-2014-9417—

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (progr

23RISCO

abrir ↗

Referência

CVE-2014-9439

CVE-2014-9439—

Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-4830

CVE-2010-4830—

SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r

23RISCO

abrir ↗

Referência

CVE-2010-4834

CVE-2010-4834—

Multiple SQL injection vulnerabilities in index.php in OneOrZero AIMS 2.6.0 Members Edition and 2.7.0 Trial Edition allo

23RISCO

abrir ↗

Referência

CVE-2010-4850

CVE-2010-4850—

Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri

23RISCO

abrir ↗

Referência

CVE-2010-4853

CVE-2010-4853—

SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2010-4853

CVE-2010-4853—

SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência

CVE-2012-4060

CVE-2012-4060—

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência

CVE-2010-0951

CVE-2010-0951—

SQL injection vulnerability in go_target.php in dev4u CMS allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência

CVE-2026-59097

CVE-2026-59097MEDIUM

Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

33RISCO

abrir ↗

Referência

CVE-2026-59095

CVE-2026-59095HIGH

LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl

41RISCO

abrir ↗

Referência

CVE-2026-59094

CVE-2026-59094HIGH

Pathway - Unauthenticated Denial of Service via Exponential Glob Pattern Matching in Document Store

41RISCO

abrir ↗

Referência

CVE-2026-34097

CVE-2026-34097MEDIUM

Guardian Language-System XSS via id Parameter in text_file.php

33RISCO

abrir ↗

Referência

CVE-2026-34096

CVE-2026-34096MEDIUM

Guardian Language-System XSS via name Parameter in designer.php

33RISCO

abrir ↗

Referência

CVE-2026-58127

CVE-2026-58127CRITICAL

PACSgear MediaWriter 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service

48RISCO

abrir ↗

Referência

CVE-2026-11562

CVE-2026-11562MEDIUM

WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update

33RISCO

abrir ↗

Referência

CVE-2026-9576

CVE-2026-9576MEDIUM

Fluent Booking < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export

33RISCO

abrir ↗

Referência

CVE-2026-13565

CVE-2026-13565MEDIUM

SourceCodester Class and Exam Timetabling System edit_class1.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-13563

CVE-2026-13563HIGH

Edimax EW-7478APC POST Request formL2TPSetup stack-based overflow

41RISCO

abrir ↗

Referência

CVE-2010-1062

CVE-2010-1062—

Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magi

23RISCO

abrir ↗

Referência

CVE-2010-1066

CVE-2010-1066—

AR Web Content Manager (AWCM) 2.1 stores sensitive information under the web root with insufficient access control, whic

23RISCO

abrir ↗

Referência

CVE-2014-9633

CVE-2014-9633—

The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device ha

23RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Referência

CVE-2020-6207

CVE-2020-6207CRITICALsob ataque

SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform an

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.