Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
CampSite 2.6.1 - 'g_documentRoot' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 6.1-RELEASE-p10 - 'scheduler' Local Denial of Service
p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 10 libnspr - 'LD_PRELOAD' Arbitrary File Creation Privilege Escalation (1)
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Amazonia Mod - 'zufallscodepart.php' Remote File Inclusion
PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - 'index.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
maluinfo 206.2.38 - 'bb_usage_stats.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - 'rss.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris Netscape Portable Runtime API 4.6.1 - Local Privilege Escalation (1)
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - 'rss2.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - 'admin.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - 'rdf.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YaPiG 0.9x - 'Thanks_comment.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 6.1-RELEASE-p10 - 'ftruncate' Local Denial of Service
ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate functio
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Add Name Module - 'Not_Mem.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MamboLaiThai ExtCalThai 0.9.1 - 'admin_events.php?CONFIG_EXT[LANGUAGES_DIR]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for M
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP TopSites FREE 1.022b - 'config.php' Remote File Inclusion
PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 5.4/6.0 - 'ptrace PT_LWPINFO' Local Denial of Service
Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and k
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Download-Engine 1.4.2 - 'spaw' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.x - Public Pages MultipleCross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in phplist before 2.10.3 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MamboLaiThai ExtCalThai 0.9.1 - 'mail.inc.php?CONFIG_EXT[LIB_DIR]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for M
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeWPS 2.11 - 'upload.php' Remote Command Execution
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier
23RISCO
abrir ↗Metasploit600
Solaris libnspr NSPR_LOG_FILE Privilege Escalation
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CommunityPortals 1.0 - 'bug.php' Remote File Inclusion
PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CommunityPortals 1.0 - 'import-archive.php' File Inclusion
PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-31
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tagit2b - 'DelTagUser.php' Remote File Inclusion
PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hastymail 1.x - IMAP SMTP Command Injection
CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6_public and earlier allows
23RISCO
abrir ↗Metasploit300
MS06-071 Microsoft Internet Explorer XML Core Services HTTP Request Handling
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.