Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
phpBB 2.0.20 - Unauthorized HTTP Proxy
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Geeklog 1.4 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier ve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - Buffer Overflow
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU
46RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vizra - 'A_Login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Path Conversion
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'subList.asp?CatID' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'view.asp?Pic' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EDirectoryPro - 'Search_result.asp' SQL Injection
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.1.1 - 'showthread.php' SQL Injection
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Infotech Storage Library - Heap Corruption
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to exe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Intel Wireless Service - 's24evmon.exe' Shared Memory
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
timobraun Dynamic Galerie 1.0 - 'index.php?pfad' Arbitrary Directory Listing
Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ocean12 Technologies Calendar Manager Pro 1.0 1 - '/admin/main.asp?date' Cross-Site Scripting
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
timobraun Dynamic Galerie 1.0 - 'galerie.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Creative Software UK Community Portal 1.1 - 'DiscView.php?forum_id' SQL Injection
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Creative Software UK Community Portal 1.1 - 'DiscReply.php?mid' SQL Injection
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
timobraun Dynamic Galerie 1.0 - 'galerie.php?pfad' Arbitrary Directory Listing
Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Creative Software UK Community Portal 1.1 - 'Discussions.php?forum_id' SQL Injection
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpListPro 2.01 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to e
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.