Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
NOCC 1.0 - 'no_mail.php?html_no_mail' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.9 - XCode Tag HTML Injection
Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC 1.0 - 'filter_prefs.php?html_filter_select' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC 1.0 - 'error.php?html_error_occurred' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web Calendar Pro - 'Dropbase.php' SQL Injection
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oi! Email Marketing System 3.0 - 'index.php' SQL Injection
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC 1.0 - 'html_bottom_table.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JGS-Gallery 4.0 - 'Board jgs_galerie_scroll.php?userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burnin
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NOCC Webmail 1.0 - Local File Inclusion / Remote Code Execution
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.x - Arbitrary File Upload
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - Remote Denial of Service
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumptio
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6 1 News Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
myPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - Local File Inclusion
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6 1 Your_Account Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Surveys Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.x - 'Ratefile.php' Cross-Site Scripting
Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - 'index.php' Remote File Inclusion
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
myPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noah's Classifieds 1.0/1.3 - Search Page SQL Injection
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Coppermine Module - 'album' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player - Plugin Overflow (MS06-006) (3)
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Inter
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla (Multiple Products) - iFrame JavaScript Execution
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Stories_Archive Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Web_Links Module - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dragonfly CMS 9.0.6.1 Downloads Module - 'c' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.6x/0.7x NS-Languages Module - 'language' SQL Injection
SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.6x/0.7x NS-Languages Module - 'language' Cross-Site Scripting
Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) atta
23RISCO
abrir ↗Metasploit600
Safari Archive Metadata Command Execution
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to ex
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.