Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Frameset Memory Corruption
Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which al
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bookmark4U 2.0 - '/inc/config.php?env[include_prefix]' Remote File Inclusion
PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple pr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LifeType 1.0.4 - SQL Injection
SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DotClear 1.2.4 - 'prepend.php' Remote File Inclusion
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/categories.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XUEBook 1.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/index.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBWd Guestbook 1.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/authors.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/articles.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - 'showcatpicks.php?file_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - '/admin/editconfig.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dotWidget for articles 2.0 - 'showarticle.php?file_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles (dotwidgeta) 0.2 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PixelPost 1-5rc1-2 - Privilege Escalation
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'posts.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.5.0.4 - 'marquee' Denial of Service
Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Enigma Haber 4.2 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LocazoList Classifieds 1.0 - 'Viewmsg.asp' SQL Injection
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'template.php' Remote File Inclusion
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DELTAScripts PHP Pro Publish 2.0 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP ManualMaker 1.0 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'vacadma.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iShopCart - 'vGetPost()' Remote Buffer Overflow (CGI)
Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'approb.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'search.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'options.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Squirrelmail 1.4.x - 'Redirect.php' Local File Inclusion
PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals i
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'vacadmb.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.