Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Maxthon Browser 1.x - Content-Type Buffer Overflow
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a l
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenVms 8.3 Finger Service - Stack Buffer Overflow
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'order.asp?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disab
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (da
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pluck CMS 4.5.2 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
POWERGAP ShopSystem - 's03.php' SQL Injection
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'changepassword.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'config.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
8E6 Technologies R3000 - Host Header Internet Filter Security Bypass
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host heade
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pcshey Portal - 'kategori.asp' SQL Injection
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'report.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'month.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Meeting Room Booking System (MRBS) 1.2.6 - 'search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Keld PHP-MySQL News Script 0.7.1 - 'login.php' SQL Injection
SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.