Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.438exploits catalogados
36.583CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.152GitHub PoC 15.079VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentespopularesrisco
19.066 exploits
Exploit-DB✓ VexDay Proof
CLScript.com Classifieds Software - SQL Injection
SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenCominterne 1.01 - Local File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.764 Module modload - SQL Injection
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMScout 2.08 - SQL Injection
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JoomRadio 1.0 - SQL Injection
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4.0.5 (531.22.7) - Denial of Service
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passwo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP System Management Homepage - 'RedirectUrl' Open Redirection
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to re
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZipWrangler 1.20 - '.zip' File (SEH)
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when register_globals is enabled, a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft AskMe Pro 2.1 - 'que_id' SQL Injection
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openpresse 1.01 - Local File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass
Multiple cross-site scripting (XSS) vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpGreetCards 3.7 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in phpGreetCards 3.7 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - Remote Denial of Service
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure
Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostna
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AJ Matrix 3.1 - 'id' Multiple SQL Injections
SQL injection vulnerability in index.php in AJ Matrix DNA allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AJ Shopping Cart 1.0 (maincatid) - SQL Injection
SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cacti 0.8.7e - SQL Injection
SQL injection vulnerability in templates_export.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FlashCard 2.6.5 - 'id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache ActiveMQ 5.2/5.3 - Source Code Information Disclosure
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache OFBiz - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlie
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Viscom Software Movie Player Pro SDK ActiveX 6.8 - Remote Buffer Overflow
Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom So
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.