Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
FAR-PHP 1.0 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TimeTrex Time 2.2 and Attendance Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal
Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notificat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Ad-Exchange Script - 'id' SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mono 2.0 - 'System.Web' HTTP Header Injection
CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP headers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vim 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/english/account.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/french/account_newsletters.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/templates/Freeway/boxes/whos_online.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NewsHOWLER 1.03 - Cookie Data SQL Injection
SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the ne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/includes/modules/faqdesk/faqdesk_article_require.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/templates/Freeway/boxes/loginbox.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/templates/Freeway/boxes/card1.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway 1.4.1.171 - '/includes/modules/newsdesk/newsdesk_article_require.php?language' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.8 - 'AWStats.pl' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 6.6.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Open Source 4.6.2 - '/mambots/editors/mostlyce/' PHP/connector.php?Query String Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FipsCMS 2.1 - 'neu.asp' SQL Injection
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Open Source 4.6.2 - '/administrator/popups/index3pop.php?mosConfig_sitename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.2 and 4.6.5, when register_globals is enabled, allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FlexCMS 2.5 - 'inc-core-admin-editor-previouscolorsjs.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPizabi 0.848b C1 HP3 - 'id' Local File Inclusion
Directory traversal vulnerability in index.php in PHPizabi 0.848b C1 HFP3 allows remote authenticated administrators to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 4.01 - 'readmore.php' SQL Injection
SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yelp 2.23.1 - Invalid URI Format String
Format string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after 2.19.90 and before 2.24
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Meet#Web 0.8 - 'RegResource.class.php?root_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Meet#Web 0.8 - 'modules.php?root_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Meet#Web 0.8 allow remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.