Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.533exploits catalogados
35.607CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
FreeWebShop 2.1/2.2 - 'index.php?page' Traversal Arbitrary File Access
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and incl
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kayako SupportSuite 3.0.32 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_g
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WarFTPd 1.82.00-RC11 - Remote Denial of Service
War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPManager 2.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Article Script 1.6.3 - 'rss.php' SQL Injection
SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_dpage.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_forum_view.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - Multiple Vulnerabilities
All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
@cid Stats 2.3 - 'Install.php3' Remote File Inclusion
PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary P
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_show_ec_products.php' Full Path Disclosure
All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_codice_fiscale.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_dpage.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_contact_us.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_show_page_help.php' Full Path Disclosure
All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_users_online.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_edit_user.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'load_page' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_forum_view.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
America Online ICQ 5.1 - ActiveX Control Remote Code Execution
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_links.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_newsletter.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_news.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_links_search.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_login.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_links_search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xoops 2.0.5 - 'NewList.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_show_ec_products.php' SQL Injection
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_show_ec_products.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIOCP 1.3.x - 'cp_users_online.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.