Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.772exploits catalogados
35.760CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
ZixForum 1.12 - 'forum.asp' Multiple SQL Injections
SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID para
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Watchfire AppScan QA 5.0.x - Remote Code Execution
Buffer overflow in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an H
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Atlant Pro 8.0.9 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dick Copits PDEstore 1.8 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'profile.asp?PROFILE_ID' SQL Injection
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
News Module for Envolution - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in the News module in Envolution allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'topic.asp?TID' SQL Injection
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Scripts Ad Manager Pro 2.0 - 'Advertiser_statistic.php' SQL Injection
SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Limbo 1.0.4.2 - '_SERVER[REMOTE_ADDR]' Remote Command Execution
SQL injection vulnerability in index.php in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AppServ Open Project 2.5.3 - Remote Denial of Service
AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scientific Atlanta DPX2100 Cable Modem - LanD Packet Denial of Service
Scientific Atlanta DPX2100 Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP pac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WikkaWiki 1.1.6 - 'TextSearch.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in TextSearch in WikkaWiki 1.1.6.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jamit Job Board 2.4.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Limbo CMS 1.0.4.2 - 'option' Traversal Arbitrary File Access
Directory traversal vulnerability in index2.php in Limbo CMS 1.0.4.2 and earlier allows remote attackers to include arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Westell Versalink 327W - LanD Packet Denial of Service
Westell Versalink 327W allows remote attackers to cause a denial of service (device crash) via an IP packet with the sam
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'subscribers.tracking.edit.php?subtrackingid' SQL Injection
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'customer.tickets.view.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'popups.edit.php?popupid' SQL Injection
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'sales.view.php?customerid' SQL Injection
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'tracking.details.php?trackingid' SQL Injection
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
News Module for Envolution - 'modules.php' Multiple SQL Injections
SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 7.x - Content Filtering Bypass
Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickPayPro 3.1 - 'design.php?delete' SQL Injection
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Macromedia Flash Media Server 2 - Remote Denial of Service
The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPBB 0.4 - 'forum.asp?FORUM_ID' SQL Injection
Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netref 3.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DreamLevels Dream Poll 3.0 - 'View_Results.php' SQL Injection
SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP-DEV XM Forum - 'forum.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.