Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.020exploits catalogados
35.276CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.446Referência 22.166GitHub PoC 14.080VulnCheck XDB 8.604Nuclei 4.251Metasploit 3.473✓ só verificadosrecentespopularesrisco
24.446 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection
SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FFmpeg 0.5 - Multiple Remote Vulnerabilities
FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Loggix Project 9.4.5 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProdLer 2.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BAnner ROtation System mini - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_surveymanager 1.5.0 - 'stype' SQL Injection
SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla!
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DDL CMS 1.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting
Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal
Cross-site scripting (XSS) vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FanUpdate 2.2.1 - 'show-cat.php' SQL Injection
SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Network Management/Inventory System - 'header.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/header.php in ClearSite 4.50 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zainu 1.0 - SQL Injection
SQL injection vulnerability in index.php in Zainu 1.0 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal
Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Remote Denial of Service
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter applic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FSphp 0.2.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in FSphp 0.2.1 allow remote attackers to execute arbitrary PHP code v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerver HTTP Server 4.32 - Remote Denial of Service
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port ass
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quiksoft EasyMail 6 - 'AddAttachment' Remote Buffer Overflow
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitra
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nephp Publisher Enterprise 4.5 - Authentication Bypass
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc 2.x - 'strfmon()' Integer Overflow
Multiple integer overflows in the strfmon implementation in the GNU C Library (aka glibc or libc6) 2.10.1 and earlier al
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CF Shopkart 5.3x - 'itemID' SQL Injection
SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Changetrack 4.3-3 - Local Privilege Escalation
changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filena
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSiteAdmin 0.9.7b - 'pageHeader.php?path' Remote File Inclusion
PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FMyClone 2.3 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ease Audio Cutter 1.20 - '.wav' Local Crash (PoC)
Unspecified vulnerability in MP3-Cutter Ease Audio Cutter 1.20 allows user-assisted remote attackers to cause a denial o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_album 1.14 - Directory Traversal
Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote att
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_jreservation 1.5 - 'pid' Blind SQL Injection
SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PaoLink 1.0 - 'scrivi.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NaviCOPA Web Server 3.01 - Source Code Disclosure
InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP reque
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSSMediaScript - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 all
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.