Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection
Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Phpclanwebsite 1.23.1 - SQL Injection
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
123 Flash Chat 5.0 - Remote Code Injection
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a craft
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
creLoaded 6.15 - 'HTMLAREA' Automated Perl
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
miniBloggie 1.0 - 'login.php' SQL Injection
SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SleeperChat 0.3f - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PixelPost 1.4.3 - User Comment HTML Injection
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arb
23RISCO
abrir ↗Metasploit300
KarjaSoft Sami FTP Server v2.0.2 USER Overflow
Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a l
50RISCO
abrir ↗Metasploit300
KarjaSoft Sami FTP Server v2.0.2 USER Overflow
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.0.1/1.0.2 Notepad - 'usercp.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AZ Bulletin Board 1.0.x/1.1 - 'post.php' HTML Injection
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NewsPHP - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZDatabase 2.0 - 'db_id' Remote Command Execution
Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlogPHP 1.2 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rockliffe MailSite 5.3.4/6.1.22/7.0.3 - HTTP Mail Management Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TFTPD32 2.81 - GET Format String Denial of Service (PoC)
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string speci
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebspotBlogging 3.0 - 'login.php' SQL Injection
SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SaralBlog 1.0 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EggBlog 2.0 - 'message' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EggBlog 2.0 - 'id' SQL Injection
SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id paramete
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 4.x - CREATE Temporary TABLE Symlink Privilege Escalation
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aoblogger 2.3 - 'login.php?Username' SQL Injection
SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aoblogger 2.3 - URL BBcode Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a j
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
microBlog 2.0 - 'index.php' Multiple SQL Injections
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pcAnywhere 8.0/9.0/11.x - Authentication Denial of Service
Buffer overflow in Symantec pcAnywhere 11.0.1, 11.5.1, and all other 32-bit versions allows remote attackers to cause a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PowerPortal 1.1/1.3 - 'index.php' Cross-Site Scripting
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Computer Associates Unicenter 6.0 - Remote Control DM Primer Remote Denial of Service
The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PowerPortal 1.1/1.3 - 'search.php' Cross-Site Scripting
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aoblogger 2.3 - 'create.php' Entry Creation
create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bit 5 Blog 8.1 - 'index.php' SQL Injection
SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.