Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/m_2.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pickle 0.3 - 'download.php' Local File Inclusion
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
News Rover 12.1 Rev 1 - Stack Overflow (2)
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - ACTIVATE_SUBSCRIPTION SQL Injection
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Shop Kit Plus - 'StyleCSS.php' Local File Inclusion
Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (1)
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple one-file Gallery - 'gallery.php?f' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access
Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XT:Commerce 3.04 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g - KUPW$WORKER.MAIN Grant/Revoke dba Permission
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'step' Remote File Inclusion
PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'load' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML v
23RISCO
abrir ↗Metasploit300
Wireshark chunked_encoding_dissector Function DOS
Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g - KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - ReadDirectoryChangesW Information Disclosure
The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access
Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pheap 1.x/2.0 - 'edit.php' Directory Traversal
Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoveCMS 1.4 - 'step' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pyrophobia 2.1.3.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/out.php in Pyrophobia 2.1.3.1 allows remote attackers to inject arbi
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.