Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
SoftBizScripts Dating Script 1.0 - 'index.php' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows RRAS - Remote Stack Overflow (MS06-025) (Metasploit)
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ralf image Gallery 0.7.4 - Multiple Vulnerabilities
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera 9 - long href Remote Denial of Service
Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL cont
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
e107 0.7.5 - 'Subject' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maximus SchoolMAX 4.0.1 - 'Error_msg' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent appli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'profileview.php?membername' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - '/mail/index.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.0.9/3.5.x - 'member.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'online.php?site_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GnuPG 1.4.3/1.9.x - Parse_User_ID Remote Buffer Overflow
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'mycontacts.php' membername Arbitrary User Buddy List Manipulation
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'expire.php?cust_name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SmartSite CMS 1.0 - 'root' Remote File Inclusion
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - '/mail/reply.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V3 Chat Instant Messenger - 'profile.php?site_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Singapore 0.9.x/0.10 - 'index.php?template' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WeBBoA Host Script 1.1 - SQL Injection
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vCard PRO - 'search.php?event_id' SQL Injection
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IdeaBox 1.1 - 'gorumDir' Remote File Inclusion
PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco CallManager 3.x/4.x - 'Web Interface 'ccmuser/logon.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SaphpLesson 1.1/2.0/3.0 - Multiple SQL Injections
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco CallManager 3.x/4.x - 'Web Interface 'ccmadmin/phonelist.asp?Pattern' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vCard PRO - 'create.php?card_id' SQL Injection
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Singapore 0.9.x/0.10 - Multiple Traversal Arbitrary File Access
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
e107 0.7.5 - 'search.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vCard PRO - 'rating.php?card_id' SQL Injection
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vCard PRO - 'gbrowse.php?cat_id' SQL Injection
Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.