Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
Simplog 1.0.2 - Information Disclosure
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TotalECommerce 1.0 - 'index.asp?id' SQL Injection
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CutePHP CuteNews 1.4.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 2.3.4 - 'misc.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) 1.04 - 'misc.php' SQL Injection (2)
SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LogIT 1.3/1.4 - Remote File Inclusion
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a U
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PluggedOut Nexus 0.1 - 'forgotten_password.php' SQL Injection
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DCI-Designs Dawaween 1.03 - 'Poems.php' SQL Injection
SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NZ eCommerce System - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SMBlog 1.2 - Arbitrary PHP Command Execution
PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mail.App 10.5.0 (OSX) - Image Attachment Command Execution (Metasploit)
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - '/usr/bin/passwd' Custom Passwd Privilege Escalation
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution
The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1)
Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection
PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.0/5.1 - 'mb_send_mail()' Restriction Bypass
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QwikiWiki 1.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kerio Personal Firewall 2.1.4 - Remote Authentication Packet Overflow (Metasploit)
Buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows r
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5.0/5.1 with Sendmail Mail Function - 'additional_param' Arbitrary File Creation
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepti
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 6.0 - 'nfsd' Remote Kernel Panic (Denial of Service)
nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Archangel Weblog 0.90.2 - Authentication Bypass
Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CrossFire 1.8.0 - 'oldsocketmode' Remote Buffer Overflow (PoC)
Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
n8cms 1.1/1.2 - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5.0.18 - Query Logging Bypass
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbi
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.