Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web Wiz NewsPad - Database Disclosure
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBX Phone System 2.x - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Guestbook 3.50 - Admin Login
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct requ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
webMathematica 3 - 'MSP' Script Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB
PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader / Acrobat - '.PDF' File Overflow
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RISCO
abrir ↗Exploit-DB
Simple PHP Blog 0.5.1 - Local File Inclusion
Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Uploader 2.0 - File Disclosure
Directory traversal vulnerability in api/download_checker.php in MegaLab The Uploader 2.0 allows remote attackers to rea
23RISCO
abrir ↗Exploit-DB
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Denial of Service
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Business Directory 2 - 'searchadvance.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mini File Host 1.5 - Arbitrary File Upload
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by upload
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active PHP BookMarks 1.3 - SQL Injection
SQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
weenCompany - SQL Injection
SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoolPlayer 2.18 - M3U Playlist Buffer Overflow
Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which rev
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP3) - Local Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - Multiple Vulnerabilities
misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail actio
23RISCO
abrir ↗Exploit-DB
VideoCMS 3.1 - SQL Injection
SQL injection vulnerability in index.php in CodeMight VideoCMS 3.1 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update08.php?configfile' Traversal Local File Inclusion
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum - Arbitrary File Upload
Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPhotoalbum 0.5 - SQL Injection
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ultimate Uploader 1.3 - Arbitrary File Upload
Unrestricted file upload vulnerability in Element-IT Ultimate Uploader 1.3 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kasseler CMS 1.3.4 Lite - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Angelo-emlak 1.0 - Database Disclosure
Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion
Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
4Images 1.7.1 - SQL Injection
SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL co
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.