Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.620exploits catalogados
35.647CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DConnect Daemon - Listen Thread UDP Remote Buffer Overflow
Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DConnect Daemon DC Chat - Denial of Service
The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6.0/7.0 - IFrame Refresh Denial of Service
Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XM
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.0.14 - 'global.php' Encoded Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.x - 'war.php?page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PSWD.JS - Insecure Password Hash
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.x - 'war.php' Multiple SQL Injections
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow (2)
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Guestbook 3.5 - 'GB_PATH' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Quickie - 'Quick_Path' Remote File Inclusion
PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.3.x - 'preview_email.cgi?file' Arbitrary File Access
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.0
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WoW Roster 1.5 - 'hsList.php?subdir' Remote File Inclusion
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BomberClone 0.11 - Multiple Vulnerabilities
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
myEvent 1.2/1.3 - 'myevent.php' Remote File Inclusion
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'members.php?cfg_root' Remote File Inclusion
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion
PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Mosk
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Poll 1.10 - 'top.php' SQL Injection
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Deleted Frame Object Denial of Service
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Protection 1.10 - 'Protect.php' SQL Injection
SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-comments-post.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-trackback.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-feed.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.