Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Open Business Management 1.0.3 pl1 - 'group_index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Business Management 1.0.3 pl1 - 'list_index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Business Management 1.0.3 pl1 - 'publication_index.php?tf_lang' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiraksGalerie 2.62 - 'galimage.lib.php?listconfigfile[0]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiraksGalerie 2.62 - 'galsecurity.lib.php?listconfigfile[0]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Calendar Express 2.2 - 'month.php' SQL Injection
Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Business Management 1.0.3 pl1 - 'user_index.php?tf_lastname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QBik WinGate WWW Proxy Server 6.1.1.1077 - 'POST' Remote Buffer Overflow
Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial
60RISCO
abrir ↗Metasploit400
Qbik WinGate WWW Proxy Server URL Processing Overflow
Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial
60RISCO
abrir ↗Metasploit600
SpamAssassin spamd Remote Command Execution
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.x - JavaScript Key Filtering
Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.5/6.0/7.0 - JavaScript Key Filtering
Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
myNewsletter 1.1.2 - 'adminLogin.asp' Authentication Bypass
Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GD Graphics Library 2.0.33 - Remote Denial of Service
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GANTTy 1.0.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SpamAssassin spamd 3.1.3 - Command Injection (Metasploit)
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/function.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kmita FAQ 1.0 - 'search.php?q' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kmita FAQ 1.0 - 'index.php?catid' SQL Injection
SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/dbase.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/common.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Particle Wiki 1.0.2 - SQL Injection
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget CMS 1.0.6 - 'file_path' Remote File Inclusion
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows rem
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoolForum 0.x - 'editpost.php' SQL Injection
SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/config.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple pr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CyBoards PHP Lite 1.21/1.25 - 'Common.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.16.18 - Netfilter NAT SNMP Module Remote Denial of Service
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.