Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - DirectAnimation.DAUserData Denial of Service
danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Webvizyon - 'SayfalaAltList.asp' SQL Injection
SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service
The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attacker
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RW::Download - 'stats.php' Remote File Inclusion
PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.3 - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Table.Frameset NULL Dereference
Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wit
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enable
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register_globals is enabled, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Extcalendar 2.0 - 'Extcalendar.php' Remote File Inclusion
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execut
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.x - '/documentation/admin/index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.x - 'password_reminder.php?forgot' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.x - '/admin/fix_content.php?submit' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gai
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel 2000-2004 - Style Handling and Repair Remote Code Execution
Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arb
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1/6.0 - Structured Graphics Control Denial of Service
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL at
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.x - '/users/browse.php?cat' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 1.5.x - 'create_course.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kaillera 0.86 - Message Buffer Overflow
Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.5 - 'index.php?Date' SQL Injection
SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 1.x/2.x - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari Web Browser 2.0.4 - DHTML SetAttributeNode() Null Dereference Denial of Service
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttribu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImgSvr 0.6.5 - POST Denial of Service
Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.x - 'comments.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Href Title Denial of Service
Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Randshop 0.9.3/1.2 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
free QBoard 1.1 - 'delete.php?qb_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
free QBoard 1.1 - 'history.php?qb_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QTO File Manager 1.0 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.