Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.449exploits catalogados
35.552CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'load' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g - KUPW$WORKER.MAIN Grant/Revoke dba Permission
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pheap 1.x/2.0 - 'edit.php' Directory Traversal
Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'step' Remote File Inclusion
PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - ReadDirectoryChangesW Information Disclosure
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'preview.php?PHP_script_path' Remote File Inclusion
PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Desktop - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inje
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CedStat 1.31 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 8.0 Final - 'INSERT' SQL Injection
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" blo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 2.0.0.1 - 'location.hostname' Cross-Domain
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Design4Online - 'Userpages2 Page.asp' SQL Injection
SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 8.0 Final - 'INSERT' Blind SQL Injection (MySQL)
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" blo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 - ImageIO GIF Image Integer Overflow
Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a d
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Local File Access
Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attacke
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - '/spyce/examples/formtag.spy' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP Server 5.05 - XMD5 Remote Buffer Overflow (Metasploit)
Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arb
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (2)
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 7.0.2 - XML Parsing Remote Denial of Service
Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.