Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB
PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.34 - 'find_keyring_by_name()' Local Memory Corruption
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlie
23RISCO
abrir ↗Exploit-DB
PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
aavmKer4.sys in avast! Home and Professional for Windows before 4.8.1356 does not properly validate input to IOCTLs (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Help Center Live 2.0.6 - 'module=helpcenter&file=' Local File Inclusion
Directory traversal vulnerability in the HelpCenter module in Help Center Live (HCL) 2.0.6 and 2.1.7 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SmartSite 1.0.0 - Local File Inclusion
Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t
43RISCO
abrir ↗Exploit-DB
Joomla! Component Graphics 1.0.6 - Local File Inclusion
Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CLScript.com Classifieds Software - SQL Injection
SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
memcached 1.4.2 - Memory Consumption Remote Denial of Service
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component NoticeBoard 1.3 - Local File Inclusion
Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remo
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Infocus Real Estate Enterprise Edition Script - Authentication Bypass
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote
23RISCO
abrir ↗Exploit-DB
Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_global
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.764 Module modload - SQL Injection
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4.0.5 (531.22.7) - Denial of Service
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB
Kasseler CMS 2.0.5 - Bypass / Download Backup
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB
Uiga Personal Portal - 'index.php' 'view' SQL Injection
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to
23RISCO
abrir ↗Exploit-DB
Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JoomRadio 1.0 - SQL Injection
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac
23RISCO
abrir ↗Metasploit600
Maple Maplet File Creation and Command Execution
Maple <= v13 Maplet File Creation and Command Execution
36RISCO
abrir ↗Metasploit300
Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE
Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote au
23RISCO
abrir ↗Metasploit600
JBoss Java Class DeploymentFileRepository WAR Deployment
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Metasploit600
JBoss JMX Console Beanshell Deployer WAR Upload and Deployment
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenCominterne 1.01 - Local File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMScout 2.08 - SQL Injection
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passwo
23RISCO
abrir ↗Exploit-DB
Invision Power Board - Denial of Service
index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unsp
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.