Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
AWStats 4.0/5.x/6.x - AWStats.pl Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xFlow 5.46.11 - 'index.cgi' Multiple SQL Injections
Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
otalCalendar - 'about.php?inc_dir' Remote File Inclusion
PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Visale 1.0 - 'pblscg.cgi?catsubno' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xFlow 5.46.11 - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IntelliLink Pro 5.06 - 'edit.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Visale 1.0 - 'pblsmb.cgi?listno' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CommuniMail 1.2 - 'templates.cgi?form_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BannerFarm 2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ContentBoxx - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ThWboard 2.8 - 'showtopic.php' SQL Injection
SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IntelliLink Pro 5.06 - 'addlink_lwp.cgi?url' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plexum PlexCart X5 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution E
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Visale 1.0 - 'pbpgst.cgi?keyval' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ModernBill 4.3 - 'user.php' SQL Injection
Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Article Publisher 1.0.1 Pro - Multiple SQL Injections
SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CutePHP CuteNews 1.4.1 Editnews Module - Cross-Site Scripting
Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CommuniMail 1.2 - 'mailadmin.cgi?list_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPLister 0.4.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection
SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xine 0.9/1.0 - Playlist Handling Remote Format String
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Guestbook 3.50 - 'Page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Monster Top List 1.4 - 'functions.php' Remote File Inclusion
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.1 - Global Variable Overwrite
MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Coppermine 1.4.4 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DbbS 2.0 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPFaber TopSites - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.