Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
MD News 1 - 'admin.php' SQL Injection
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'area.View.action?areaID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MAXDEV CMS 1.0.72/1.0.73 - 'PNuserapi.php' SQL Injection
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'user.View.action?userID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySmartBB 1.1.2/1.1.3 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (2)
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraVNC 1.0.1 - Multiple Remote Error Logging Buffer Overflow Vulnerabilities (1)
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-ass
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - Address Bar Spoofing
Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web-APP.net WebAPP 0.9.x - 'index.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LucidCMS 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bugzero 4.3.1 - 'edit.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aWebNews 1.2 - 'visview.php?_GET['cid']' SQL Injection
Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bugzero 4.3.1 - 'query.jsp?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web-APP.net WebAPP 0.9.x - '/mods/calendar/index.cgi?vsSD' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Color LaserJet 2500/4600 Toolbox - Directory Traversal
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Win
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.0/5.1 - PHPInfo Large Input Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject ar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Total Commander 6.x - 'unacev2.dll' Buffer Overflow (PoC)
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multipl
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ReloadCMS 1.2.5 - Cross-Site Scripting / Remote Code Execution
Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SQuery 4.5 - 'libpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'createTextRang' Remote (Metasploit)
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arb
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISP Site Man - 'admin_login.asp' SQL Injection
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteSearch Indexer 3.5 - 'searchresults.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Blank'N'Berg 0.2 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'login.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'template.php?provided' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'images.php?cid' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz Image Gallery - 'suggest_image.php?cid' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedCMS 0.1 - 'profile.php?u' SQL Injection
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DbbS 2.0 - 'Topics.php' SQL Injection
SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote at
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.