Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
Indexu 5.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AzDGVote - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Saxopress - 'URL' Directory Traversal
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tritanium Bulletin Board 1.2.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simplog 0.9.2 - 's' Remote Command Execution
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft FrontPage - Server Extensions Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'index.php?type' CRLF Injection
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP head
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'tempnam() open_basedir' Restriction Bypass
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restriction
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'copy() Safe_Mode' Bypass
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBook 1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'category.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8.3 - 'Spip_login.php' Remote File Inclusion
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'login.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Shadowed Portal 5.7 - 'Load.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'picture.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SIRE 2.0 - Arbitrary File Upload
Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to uplo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'memo.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit)
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remot
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craft
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VegaDNS 0.9.9 - 'index.php?cid' SQL Injection
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TalentSoft Web+ Shop 5.0 - 'Deptname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWeb's Banner Generator 3.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Matt Wright Guestbook 2.3.1 - Guestbook.pl Multiple HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tony Cook Imager 0.4x - '.JPEG' / '.TGA' Images Denial of Service
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.5.1 - 'Vbugs.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'planning.View.action?time' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.