Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.258exploits catalogados

36.019CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentes populares risco

22.697 exploits

Referência

CVE-2009-5091

CVE-2009-5091—

SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2010-4846

CVE-2010-4846—

SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2010-4845

CVE-2010-4845—

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL comma

23RISCO

abrir ↗

Referência

CVE-2010-4829

CVE-2010-4829—

SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2013-1828

CVE-2013-1828—

The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size

23RISCO

abrir ↗

Referência

CVE-2016-1583

CVE-2016-1583—

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to ga

23RISCO

abrir ↗

Referência

CVE-2016-1583

CVE-2016-1583—

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to ga

23RISCO

abrir ↗

Referência

CVE-2025-9605

CVE-2025-9605CRITICAL

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2025-9523

CVE-2025-9523CRITICAL

Tenda AC1206 GetParentControlInfo stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2026-9062

CVE-2026-9062LOW

Agile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal

28RISCO

abrir ↗

Referência★ 14

HTTP/2 Bomb

CVE-2026-49975HIGH

Apache HTTP Server: mod_http2 denial of service

53RISCO

abrir ↗

Referência

CVE-2010-2911

CVE-2010-2911—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-2911

CVE-2010-2911—

SQL injection vulnerability in index.php in Kayako eSupport 3.70.02 allows remote attackers to execute arbitrary SQL com

23RISCO

abrir ↗

Referência

CVE-2010-1269

CVE-2010-1269—

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2010-1269

CVE-2010-1269—

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers

23RISCO

abrir ↗

Referência

CVE-2016-1595

CVE-2016-1595—

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows rem

23RISCO

abrir ↗

Referência

CVE-2009-2786

CVE-2009-2786—

SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows

23RISCO

abrir ↗

Referência

CVE-2010-3026

CVE-2010-3026—

Cross-site request forgery (CSRF) vulnerability in application/modules/admin/controllers/users.php in Tomaz Muraus Open

23RISCO

abrir ↗

Referência

CVE-2009-2585

CVE-2009-2585—

SQL injection vulnerability in index.php in Mlffat 2.2 allows remote attackers to execute arbitrary SQL commands via a m

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component Bible Study 1.5.0 - 'id' SQL Injection

CVE-2008-2643—webappsphp

SQL injection vulnerability in the Bible Study (com_biblestudy) component before 6.0.7c for Joomla! allows remote attack

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mybizz-Classifieds - 'cat' SQL Injection

CVE-2008-2845—webappsphp

SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Webdevindo-CMS 0.1 - 'hal' SQL Injection

CVE-2008-2875—webappsphp

SQL injection vulnerability in index.php in Webdevindo-CMS 1.0.0 allows remote attackers to execute arbitrary SQL comman

23RISCO

abrir ↗

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RISCO

abrir ↗

Referência

CVE-2009-3750

CVE-2009-3750—

SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the

23RISCO

abrir ↗

Referência

CVE-2016-1596

CVE-2016-1596—

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authentic

23RISCO

abrir ↗

Referência

CVE-2009-3713

CVE-2009-3713—

SQL injection vulnerability in fichero.php in MorcegoCMS 1.7.6 and earlier allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-3027

CVE-2010-3027—

SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-3029

CVE-2010-3029—

SQL injection vulnerability in statistics.php in PHPKick 0.8 allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência✓ VexDay Proof

geccBBlite 2.0 - 'id' SQL Injection

CVE-2008-4517—webappsphp

SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands via

23RISCO

abrir ↗

Referência✓ VexDay Proof

myEvent 1.6 - 'eventdate' SQL Injection

CVE-2008-4650—webappsphp

SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands vi

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.