Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Invision Power Board Army System Mod 2.1 - SQL Injection
SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Virtual Hosting Control System 2.2/2.4 - 'login.php?check_login()' Authentication Bypass
The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when au
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fortinet Fortigate 2.x/3.0 - URL Filtering Bypass
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypass
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FlySpray 0.9.7 - 'install-0.9.7.php' Remote Command Execution
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 6.x/7.x - 'header.php?Pagetitle' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Siteframe Beaumont 5.0.1 - 'search.php?Q' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HiveMail 1.2.2/1.3 - 'addressbook.update.php?contactgroupid' Arbitrary PHP Command Execution
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LinPHA 0.9.x/1.0 - 'sec_stage_install.php' Local File Inclusion
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Half-Life CSTRIKE Server 1.6 (Non Steam) - Denial of Service
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HiveMail 1.2.2/1.3 - 'folders.update.php?folderid' Arbitrary PHP Command Execution
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 0.16.1 - 'readfolder.php?path' Arbitrary Directory Listing
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LinPHA 0.9.x/1.0 - 'forth_stage_install.php' Local File Inclusion
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LinPHA 0.9.x/1.0 - 'lang' Local File Inclusion
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 0.16.1 - 'dir.php' Folder Permission Disclosure
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which return
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Half-Life CSTRIKE Server 1.6 (Non Steam) - Denial of Service
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 6.0 - LDAP Memory Corruption
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LinPHA 0.9.x/1.0 - 'install.php' Local File Inclusion
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DocMGR 0.54.2 - 'file_exists' Remote Command Execution
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 0.16.1 - 'index.php?bgcol' Cross-Site Scripting
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulner
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HiveMail 1.2.2/1.3 - 'index.php' $_SERVER['PHP_SELF'] Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (2)
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenVMPSd 1.3 - Remote Format String
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.1/2.5 - 'show_archives.php?template' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Denial of Service
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Power Daemon 2.0.2 - 'WHATIDO' Remote Format String
Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Denial of Service
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino 6.x/7.0 iNotes - Email Subject Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino 6.x/7.0 - iNotes JavaScript: Filter Bypass
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers t
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.