Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPAlbum 0.2.2/0.2.3/4.1 - 'Language.php' File Inclusion
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.1/2.5 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Papoo 2.1.x - 'print.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AR-Blog 5.2 - 'print.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MODx CMS 0.9.1 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 8.52 - Stylesheet Attribute Buffer Overflow
Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a sty
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PowerClan 1.14 - 'member.php' SQL Injection
SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - legend color Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'AlterCast?op' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W3C Amaya 9.4 - textarea rows Attribute Value Overflow
Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Document Server 6.0 Extensions - 'ads-readerext?actionID' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to i
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plone 2.x - MembershipTool Access Control Bypass
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PatroNet CMS - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Interaktiv.shop 4/5 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Guestbook 1.3 - 'index.php' SQL Injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'detail.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft FrontPage - Server Extensions Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Saxopress - 'URL' Directory Traversal
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SWSoft Confixx 3.0.6/3.0.8/3.1.2 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Clever Copy 3.0 - 'Connect.INC' Information Disclosure
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.