Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.013exploits catalogados
41.057CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentespopularesrisco
89.013 exploits
Exploit-DB✓ VexDay Proof
PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Digishop 4.0 - 'cart.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee ePo 3.5.0 / ProtectionPilot 1.1.0 - Source Remote (Metasploit)
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attac
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10.8.x - cpwrap via MySQLAdmin Privilege Escalation
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unspe
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'tem.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'funk.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyWebmin 1.0 - 'target' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yblog - 'uss.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HT
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyWebmin 1.0 - 'target' Remote File Inclusion
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Geotarget - 'script.php' Remote File Inclusion
PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (2)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (1)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.5.1.1 - 'doeditconfig.php' Code Execution
Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OlateDownload 3.4 - 'search.php?query' SQL Injection
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OlateDownload 3.4 - 'details.php?page' SQL Injection
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB XS 0.58a - 'phpbb_root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL SSLv2 - Null Pointer Dereference Client Denial of Service
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier
28RISCO
abrir ↗Metasploit500
NaviCOPA 2.0.1 URL Handling Buffer Overflow
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HT
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - WebViewFolderIcon setSlice() (HTML)
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service
68RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIX 3.x/4.x / Windows 95/98/2000/NT 4.0 / SunOS 5 - 'gethostbyname()' Remote Buffer Overflow
Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SAP Internet Transaction Server 6.10/6.20 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component VirtueMart Joomla! eCommerce Edition 1.0.11 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla!
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MKPortal 1.0/1.1 - 'PMPopup.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSelect Web Development - 'index.php3' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Blog Pixel Motion 2.1.1 - PHP Code Execution / Create Admin
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrar
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Blog Pixel Motion 2.1.1 - PHP Code Execution / Create Admin
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct requ
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.