Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Ovidentia 5.6.x/5.8 - 'search.php?babInstallPath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Squirrelmail 1.4.x - 'Redirect.php' Local File Inclusion
PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals i
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Abarcar Realty Portal 5.1.5 - 'content.php' SQL Injection
SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteBuilder-FX - 'top.php' Remote File Inclusion
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tekno.Portal - 'Bolum.php' SQL Injection
SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pppBlog 0.3.8 - System Disclosure
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Snort 2.4.x - URIContent Rules Detection Evasion
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent"
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Proc dentry_unused Corruption Local Denial of Service
Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.0.10 - 'Portal.php' SQL Injection
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featur
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 - MHTML URI Buffer Overflow (PoC)
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook E
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EVA-Web 2.1.2 - 'rubrique.php3?date' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EVA-Web 2.1.2 - 'article-album.php3?debut_image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EVA-Web 2.1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Airspot DSA-3100 Gateway - 'Login_error.SHTML' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow
Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a lo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TikiWiki 1.9 - 'tiki-lastchanges.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nukedit 4.9.6 - Unauthorized Admin Add
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary gro
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPBB 0.5.2 - 'Perform_search.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Photoalbum B&W 1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Speedy ASP Forum - 'profileupdate.asp' User Pass Change
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified acco
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Enigma Haber 4.3 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.x/6.x - Multiple Remote File Inclusions
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
tinyBB 0.3 - Remote File Inclusion / SQL Injection
PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F@cile Interactive Web 0.8x - Remote File Inclusion / Cross-Site Scripting
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, as
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPSitem 2.0 - SQL Injection / Database Disclosure
Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F@cile Interactive Web 0.8x - Remote File Inclusion / Cross-Site Scripting
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
tinyBB 0.3 - Remote File Inclusion / SQL Injection
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.