Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
JetPhoto 1.0/2.0/2.1 - 'thumbnail.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft FrontPage - Server Extensions Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6.1 R2 - 'Include.php' SQL Injection
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'login.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8.3 - 'Spip_login.php' Remote File Inclusion
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'index.php?type' CRLF Injection
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP head
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Horde 3.0.9/3.1.0 - Help Viewer Remote Code Execution (Metasploit)
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remot
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'memo.php?itemID' SQL Injection
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Shadowed Portal 5.7 - 'Load.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Neon Responders 5.4 - Remote Clock Synchronization Denial of Service
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craft
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'copy() Safe_Mode' Bypass
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShopWeezle 2.0 - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'picture.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'tempnam() open_basedir' Restriction Bypass
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restriction
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VegaDNS 0.9.9 - 'index.php?cid' SQL Injection
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SIRE 2.0 - Arbitrary File Upload
Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to uplo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyForum 4.0 - 'page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBook 1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPWebGallery 1.4.1 - 'category.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWeb's Banner Generator 3.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.5.1 - 'Vbugs.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jupiter CMS 1.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tony Cook Imager 0.4x - '.JPEG' / '.TGA' Images Denial of Service
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Matt Wright Guestbook 2.3.1 - Guestbook.pl Multiple HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TalentSoft Web+ Shop 5.0 - 'Deptname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'planning.View.action?time' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SKForum 1.x - 'user.View.action?userID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MAXDEV CMS 1.0.72/1.0.73 - 'PNuserapi.php' SQL Injection
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MD News 1 - 'admin.php' SQL Injection
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.