Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
PHPClassifieds.Info - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CrisoftRicette 1.0 - 'Cookbook.php' Remote File Inclusion
PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure
Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information f
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MF Piadas 1.0 - 'admin.php' Cross-Site Scripting
PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - OpenLDAP Denial of Service
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'view.php?offset' SQL Injection
SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenGuestbook 0.5 - 'header.php?title' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10 - Select.HTML Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows
23RISCO
abrir ↗Metasploit200
Private Wire Gateway Buffer Overflow
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows r
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MVNForum Activatemember 1.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DreamAccount 3.1 - 'auth.api.php' Remote File Inclusion
PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable 1.x - SMTP 'HELO' Remote Denial of Service
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winged Gallery 1.0 - 'Thumb.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.0.1 - 'Port' Remote Overflow (PoC)
Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jaws 0.6.2 - Search gadget SQL Injection
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Messenger 7.0/7.5 - 'jscript.dll' Non-ASCII Character Denial of Service
Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Usenet 0.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueDragon Server 6.2.1 - '.cfm' Denial of Service
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Event Calendar 4.2 - SQL Injection
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBizScripts Dating Script 1.0 - 'featured_photos.php' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBizScripts Dating Script 1.0 - 'news_desc.php' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBizScripts Dating Script 1.0 - 'products.php' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.2/2.0/2.3 - 'report.php?postid' SQL Injection
SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ralf image Gallery 0.7.4 - Multiple Vulnerabilities
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel - Code Execution
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrar
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows RRAS - Remote Stack Overflow (MS06-025) (Metasploit)
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.2/2.0/2.3 - 'showmods.php?boardid' SQL Injection
SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitr
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.