Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
Maian Uploader 4.0 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Miniweb 2.0 - 'historymonth' SQL Injection
SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection
Multiple SQL injection vulnerabilities in BatmanPorTaL allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SmartBlog 1.3 - 'index.php' SQL Injection
Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SmartBlog 1.3 - 'index.php' SQL Injection
Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - 'upload.php' Arbitrary File Upload
Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart 2008 - 'index.php?keyword' SQL Injection
SQL injection vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EJ3 BlackBook 1.0 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chicomas 2.0.4 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alumni 1.0.8/1.0.9 - 'info.php?id' SQL Injection
SQL injection vulnerability in info.php in Project Alumni 1.0.9 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alumni 1.0.8/1.0.9 - 'index.php?year' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in pages/news.page.inc in Project Alumni 1.0.9 allows remote attackers to injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Cart 2008 - 'index.php?keyword' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Zen Software Zen Cart 2008 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EJ3 BlackBook 1.0 - 'footer.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Call of Duty 4 1.5 - 'stats' Denial of Service
Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MJGUEST 6.7 - 'QT 'mjguest.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.6.1 R2 - Multiple Remote Vulnerabilities
SQL injection vulnerability in article.php in Virtual War (aka VWar) 1.6.1 R2 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
C-News 1.0.1 - 'install.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in install.php in C-News.fr C-News 1.0.1 allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PeerCast 0.1218 - 'getAuthUserPass' Multiple Buffer Overflow Vulnerabilities
Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-pe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibTiff 3.x - Double-Free Memory Corruption
Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection
SQL injection vulnerability in the Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 component for Joomla! allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitr
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Play
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows m
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection
SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.