Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Entergal MX 2.0 - Multiple SQL Injections
SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'archbatch.php?lng' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShockBoard 3.0/4.0 - 'Offset' SQL Injection
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
K-Search 1.0 - SQL Injection
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Helpdesk Issue Manager 0.x - 'find.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unalz 0.x - Archive Filename Buffer Overflow
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archiv
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Doc System 1.5.1 - Local File Inclusion
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'details_res.php?sbres_id' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bedeng PSP 1.1 - 'index.php?a.nsub' SQL Injection
SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Top Music Module 3.0 - SQL Injection
Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'refer_friend.php?sbres_id' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Document Management System 2.0 - 'messages.php?mid' SQL Injection
Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Babe Logger 2.0 - 'index.php?gal' SQL Injection
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EdmoBBS 0.9 - SQL Injection
Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bedeng PSP 1.1 - 'download.php?a.ngroup' SQL Injection
SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netzbrett 1.5.1 - 'P_Entry' SQL Injection
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UGroup 2.6.2 - 'topic.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'nwlmail.php?lng' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Helpdesk Issue Manager 0.x - 'issue.php?id' SQL Injection
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zainu 2.0 - SQL Injection
Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Resource Repository Script - 'showcats.php?sbcat_id' SQL Injection
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Babe Logger 2.0 - 'comments.php?id' SQL Injection
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpWordPress 3.0 - Multiple SQL Injections
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Enterprise Heart Enterprise Connector 1.0.2 - 'send.php?messageid' SQL Injection
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UGroup 2.6.2 - 'forum.php?FORUM_ID' SQL Injection
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Guppy 4.5.9 - 'REMOTE_ADDR' Remote Command Execution
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ADC2000 NG Pro 1.2 - SQL Injection
mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Enterprise Heart Enterprise Connector 1.0.2 - 'messages.php?messageid' SQL Injection
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbit
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.