Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review fil
23RISCO
abrir ↗Exploit-DB
ReviewPost < 2.84 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/managerrelated.php in the administrative backend in Absolut Engine 1.7
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 8.1 (x86/x64) - 'ahcache.sys' NtApphelpCacheControl Privilege Escalation
The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1,
43RISCO
abrir ↗Exploit-DB
Absolut Engine 1.73 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProjectSend - Arbitrary File Upload (Metasploit)
Unrestricted file upload vulnerability in process-upload.php in ProjectSend (formerly cFTP) r100 through r561 allows rem
50RISCO
abrir ↗Metasploit300
ManageEngine Desktop Central Administrator Account Creation
The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote at
60RISCO
abrir ↗Exploit-DB
PHP-Calendar < 0.10.1 - Arbitrary File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth o
28RISCO
abrir ↗Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote atta
23RISCO
abrir ↗Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in
23RISCO
abrir ↗Exploit-DB
PMB 4.1.3 - (Authenticated) SQL Injection
SQL injection vulnerability in classes/mono_display.class.php in PMB 4.1.3 and earlier allows remote authenticated users
23RISCO
abrir ↗Exploit-DB
WHM.AutoPilot < 2.4.6.5 - Multiple Vulnerabilities
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php s
23RISCO
abrir ↗Exploit-DB
Easy File Sharing Web Server 6.8 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote atta
23RISCO
abrir ↗Exploit-DB
SysAid Server - Arbitrary File Disclosure
Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files
23RISCO
abrir ↗Exploit-DB
NetIQ Access Manager 4.0 SP1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers
23RISCO
abrir ↗Exploit-DB
GParted 0.14.1 - OS Command Execution
GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in
23RISCO
abrir ↗Exploit-DB
PHPMyRecipes 1.2.2 - 'browse.php?category' SQL Injection
SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Notepad++ 6.6.9 - Buffer Overflow
Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Ev
28RISCO
abrir ↗Exploit-DB
PsychoStats < 2.2.4 Beta - Cross Site Scripting
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to i
23RISCO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
23RISCO
abrir ↗Exploit-DB
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 a
28RISCO
abrir ↗Exploit-DB
Cacti Superlinks Plugin 1.4-2 - SQL Injection / Local File Inclusion
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.