Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.137exploits catalogados

35.961CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.657GitHub PoC 14.424VulnCheck XDB 8.773Nuclei 4.340Metasploit 3.485✓ só verificadosrecentes populares risco

22.657 exploits

Referência

CVE-2026-8130

CVE-2026-8130MEDIUM

SourceCodester SUP Online Shopping message.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8129

CVE-2026-8129MEDIUM

SourceCodester SUP Online Shopping wishlist.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8128

CVE-2026-8128MEDIUM

SourceCodester SUP Online Shopping viewmsg.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8127

CVE-2026-8127MEDIUM

eladmin Users API Endpoint UserController.java checkLevel access control

33RISCO

abrir ↗

Referência

CVE-2026-8126

CVE-2026-8126MEDIUM

SourceCodester Comment System post_comment.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8125

CVE-2026-8125MEDIUM

code-projects Simple Chat System sendMessage.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-8124

CVE-2026-8124MEDIUM

GPAC box_code_base.c sidx_box_read allocation of resources

33RISCO

abrir ↗

Referência

CVE-2026-8123

CVE-2026-8123MEDIUM

Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service

33RISCO

abrir ↗

Referência

CVE-2026-8122

CVE-2026-8122MEDIUM

Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service

33RISCO

abrir ↗

Referência

CVE-2026-10302

CVE-2026-10302MEDIUM

itsourcecode Fees Management System manage_fee.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-71509

CVE-2026-71509HIGH

Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-71508

CVE-2026-71508HIGH

Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint

41RISCO

abrir ↗

Referência

CVE-2026-71507

CVE-2026-71507HIGH

Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes

41RISCO

abrir ↗

Referência

CVE-2026-71506

CVE-2026-71506HIGH

Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint

41RISCO

abrir ↗

Referência

CVE-2016-20068

CVE-2016-20068HIGH

WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

41RISCO

abrir ↗

Referência

CVE-2019-25746

CVE-2019-25746HIGH

WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

41RISCO

abrir ↗

Referência

CVE-2026-12129

CVE-2026-12129MEDIUM

CodeAstro Human Resource Management System Dashboard add_tod cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-24067

CVE-2026-24067HIGH

Slate Digital Connect macOS XPC PID validation privilege escalation

41RISCO

abrir ↗

Referência

CVE-2025-71319

CVE-2025-71319HIGH

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

41RISCO

abrir ↗

Referência★ 14

watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

CVE-2026-10520CRITICAL

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

85RISCO

abrir ↗

Referência

CVE-2026-65053

CVE-2026-65053MEDIUM

Horde IMP before 7.2.0 Stored Cross-Site Scripting via AppleDouble Viewer Part Name

33RISCO

abrir ↗

Referência✓ VexDay Proof

FAQ Manager 1.2 - 'categorie.php' SQL Injection

CVE-2008-5287—webappsphp

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2026-78248

CVE-2026-78248MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78247

CVE-2026-78247MEDIUM

SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78202

CVE-2026-78202MEDIUM

itsourcecode Payroll System admin_class.php save_settings unrestricted upload

33RISCO

abrir ↗

Referência

CVE-2026-78201

CVE-2026-78201MEDIUM

itsourcecode Payroll System admin_class.php login sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78200

CVE-2026-78200MEDIUM

itsourcecode Library Management System editbooks.php sql injection

33RISCO

abrir ↗

Referência

CVE-2026-78199

CVE-2026-78199MEDIUM

SourceCodester Simple Online Food Ordering System view_prod.php sql injection

33RISCO

abrir ↗

Referência

CVE-2017-11548

CVE-2017-11548—

The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic

23RISCO

abrir ↗

Referência

CVE-2026-9513

CVE-2026-9513MEDIUM

Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection

33RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.