Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.679exploits catalogados
40.329CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4.547Metasploit 3.532✓ só verificadosrecentespopularesrisco
86.679 exploits
Exploit-DB✓ VexDay Proof
Advance Online Learning Management Script 3.1 - 'subcatid' / 'popcourseid' SQL Injection
Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Advance B2B Script 2.1.3 - 'show_id' / 'pid' SQL Injection
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
23RISCO
abrir ↗Exploit-DB
Affiliate MLM Script 1.0 - 'product-category.php?key' SQL Injection
Affiliate MLM Script 1.0 has SQL Injection via the product-category.php key parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Amazon Clone 1.0 - SQL Injection
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Crowdfunding Script 1.0 - 'latest_news_details.php?id' SQL Injection
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Ebay Clone 1.0 - 'id' / 'sub_category_id' / 'category_id' SQL Injection
FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Care Clone 1.0 - 'jobFrequency' / 'jobType' SQL Injection
FS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Linkedin Clone 1.0 - 'grid' / 'fid' / 'id' SQL Injection
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Indiamart Clone 1.0 - 'token' / 'id' / 'c' SQL Injection
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Grubhub Clone 1.0 - 'keywords' SQL Injection
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Gigs Script 1.0 - 'cat' / 'sc' SQL Injection
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or se
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Trademe Clone 1.0 - 'search' / 'id' SQL Injection
FS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the general_item_details.php id param
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Basic B2B Script 2.0.8 - 'product_details.php?id' SQL Injection
Basic B2B Script 2.0.8 has SQL Injection via the product_details.php id parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Freelancer Clone 1.0 - 'profile.php?u' SQL Injection
FS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Groupon Clone 1.0 - 'id' SQL Injection
FS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the vendor_details.php id parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DomainSale PHP Script 1.0 - 'id' SQL Injection
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Chatting System 1.0.0 - Arbitrary File Upload
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
23RISCO
abrir ↗Exploit-DB
E-commerce MLM Software 1.0 - SQL Injection
E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid paramet
23RISCO
abrir ↗Exploit-DB
CMS Auditor Website 1.0 - SQL Injection
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Realestate Crowdfunding Script 2.7.2 - 'pid' SQL Injection
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
23RISCO
abrir ↗Exploit-DB
Nearbuy Clone Script 3.2 - 'search' SQL Injection
Nearbuy Clone Script 3.2 has SQL Injection via the category_list.php search parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Shutterstock Clone 1.0 - 'keywords' SQL Injection
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
23RISCO
abrir ↗Exploit-DB
Doctor Search Script 1.0 - 'city' SQL Injection
Doctor Search Script 1.0 has SQL Injection via the /list city parameter.
23RISCO
abrir ↗GitHub PoC★ 3
RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
23RISCO
abrir ↗Exploit-DB
Co-work Space Search Script 1.0 - 'city' SQL Injection
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection
FS Thumbtack Clone 1.0 has SQL Injection via the browse-category.php cat parameter or the browse-scategory.php sc parame
23RISCO
abrir ↗Exploit-DB
Event Calendar Category Script 1.0 - 'city' SQL Injection
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Quibids Clone 1.0 - SQL Injection
FS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FS Makemytrip Clone 1.0 - 'fl_orig' / 'fl_dest' SQL Injection
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php fl_orig or fl_dest parameter.
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.