Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Foro Domus 2.10 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TinyPHPForum 3.6 - Multiple Directory Traversal Vulnerabilities
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web roo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 Kernel - APC Data-Free Local Escalation (MS05-055)
The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify ker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hylafax 4.1/4.2 (Multiple Scripts) - Remote Command Execution
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary command
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.0 - 'mysql_connect function' Local Buffer Overflow
Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Win
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - SET_MEMPOLICY Local Denial of Service
Linux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinRAR 3.30 - 'Filename' Local Buffer Overflow (1)
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinRAR 3.30 - 'Filename' Local Buffer Overflow (2)
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argument
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EFileGo 3.0 - Multiple Input Validation Vulnerabilities
Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SCO OpenServer 5.0.7 - 'termsh' Local Privilege Escalation
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ScozNet ScozBook 1.1 - 'AdminName' SQL Injection
SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DiscusWare Discus 3.10 - Error Message Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aMSN - Remote Denial of Service
aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of clien
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chimera Web Portal 0.2 - 'modules.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Disclosure
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chimera Web Portal 0.2 - 'linkcategory.php?id' SQL Injection
SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPJournaler 1.0 - 'Readold' SQL Injection
SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
InTouch 0.5.1 Alpha - User Variable SQL Injection
SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.11 (RHEL 4) - 'SYS_EPoll_Wait' Local Integer Overflow / Local Privilege Escalation
Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OOApp Guestbook 2.1 Home Script - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ades Design AdesGuestbook 2.0 Read Script - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.3 - 'GetShell' / 'GetCommand' File Enumeration
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kayako SupportSuite 3.0 0.26 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jevontech PHPenpals - PersonalID SQL Injection
SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpDocumentor 1.3.0 rc4 - Remote Command Execution
PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GMailSite 1.0.x - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPBook 1.x - Mail Field PHP Code Injection
Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OABoard 1.0 Forum - Remote File Inclusion
PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - File Lock Lease Local Denial of Service
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dream4 Koobi 5.0 - BBCode URL Tag Script Injection
Cross-site scripting (XSS) vulnerability in Koobi 5 allows remote attackers to inject arbitrary web script or HTML via n
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.