Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow
Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticated
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'search.asp?searchQuery' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Miraserver 1.0 RC4 - 'index.php?page' SQL Injection
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - HTTP Request Denial of Service (2)
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Caravel CMS 3.0 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Marwel 2.7 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Miraserver 1.0 RC4 - 'article.php?cat' SQL Injection
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acidcat CMS 2.1.13 - 'ID' SQL Injection
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
allinta CMS 2.3.2 - 'faq.asp?s' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 6.0 - 'members.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Box UK Amaxus CMS 3.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - HTTP Request Denial of Service (1)
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attacke
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cofax 2.0 - search.htm Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject ar
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Komodo CMS 2.1 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Liferay Portal Enterprise 3.6.1 - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Baseline CMS 1.95 - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZDatabase 2.1.2 - 'index.php?db_id' SQL Injection
SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'forum.cgi?forum' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IHTML Merchant Mall - SQL Injection
SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'reply.pl' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Binary Board System (BBS) 0.2.5 and earlier allow remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ScareCrow 2.13 - 'post.cgi?forum' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ScareCrow 2.13 and earlier allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.