Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
OrbitHYIP 2.0 - 'signup.php?referral' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - ImageIO OpenEXR Image File Remote Denial of Service
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (applicat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hogstorps Guestbook 2.0 - Unauthorized Access
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DMCounter 0.9.2 -b - 'Kopf.php' Remote File Inclusion
PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.1.5 - 'from_contact' SQL Injection
SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MaxTrade 1.0.1 - Multiple SQL Injections
SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SunShop Shopping Cart 3.5 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Collaborative Portal Server 3.4 - 'POS' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TextFileBB 1.0.16 - Multiple Tag Script Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
4Images 1.7.1 - 'member.php?sessionid' SQL Injection
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.2 - BBCode Script Injection
Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
4Images 1.7.1 - 'top.php?sessionid' SQL Injection
Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PlanetGallery - 'Gallery_admin.php' Authentication Bypass
planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Blog 0.2.3/0.2.4 Mod - 'Weblog_posting.php' SQL Injection
SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SMBFS CHRoot Security Restriction Bypass
Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ezb systems ultraiso 8.0.1392 - Directory Traversal
Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Artmedic Event - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
winiso 5.3 - Directory Traversal
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (dot dot) in a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
poweriso 2.9 - Directory Traversal
Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
magiciso 5.0 build 0166 - Directory Traversal
Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a ..
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion
PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibTiff 3.x - Multiple Denial of Service Vulnerabilities
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TI
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoolMenus 4.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUclassified - 'detail.asp' SQL Injection
SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibTiff 3.x - TIFFFetchData Integer Overflow
Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attack
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NeoMail - 'NeoMail.pl?sessionid' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - CIFS CHRoot Security Restriction Bypass
Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive in
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow (PoC)
Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or exe
23RISCO
abrir ↗Metasploit300
Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METADA
43RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.