Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.864exploits catalogados
40.957CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.439VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.864 exploits
Exploit-DB✓ VexDay Proof
XOOPS Tiny Event 1.01 - 'print' Option SQL Injection
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 'prayerlist' Module - 'cid' SQL Injection
SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Downloads Module - 'sid' SQL Injection
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sybase MobiLink 10.0.1.3629 - Multiple Heap Buffer Overflow Vulnerabilities
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_profile - 'oid' SQL Injection
SQL injection vulnerability in index.php in the com_profile component for Joomla! allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Hack Honeypot File Upload Manager 1.3 - 'delall' Unauthorized File Access
Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded files via unknown vectors
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Facile Forms 1.x - 'catid' SQL Injection
SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'slim.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection
Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject ar
23RISCO
abrir ↗Metasploit400
Now SMS/MMS Gateway Buffer Overflow
Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute ar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Web_Links Module - 'cid' SQL Injection
SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal
Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora 2.7.5 - 'ajax_request.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebcamXP 3.72.440/4.05.280 Beta - '/pocketpc?camnum' Arbitrary Memory Disclosure
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component astatsPRO 1.0 - 'refer.php' SQL Injection
SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Jo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProjectPier 0.8 - Multiple HTML Injection / Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin wp-people 2.0 - 'wp-people-popup.php' SQL Injection
SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.6.1 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component com_detail - 'id' SQL Injection
SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yellow Swordfish Simple Forum 1.x - 'sf-profile.php' SQL Injection
SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebcamXP 3.72.440/4.05.280 Beta - '/show_gallery_pic?id' Arbitrary Memory Disclosure
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.2 - 'SSH2_MSG_NEWKEYS' Remote Denial of Service
freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to T
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foxit WAC Remote Access Server 2.0 Build 3503 - Heap Buffer Overflow
Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to caus
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BanPro Dms 1.0 - 'index.php' Local File Inclusion
Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component Filebase - 'filecatid' SQL Injection
SQL injection vulnerability in the com_filebase component for Joomla! and Mambo allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Power Phlogger 2.2.x - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in dspStats.php in PowerPhlogger 2.2.5 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos Email Appliance 2.1 - Web Interface Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface in Sophos ES1000 and ES4000 Emai
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dokeos 1.8.4 - '/main/admin/course_category.php?category' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.