Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
software602 602 lan suite 2004 - Directory Traversal
Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413 allows remote attackers to cause a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MidiCart PHP - 'Search_List.php?SearchString' SQL Injection
Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'display.php?nlst' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or H
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'upstracking.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting vulnerabilities in FishCart 3.1 allow remote attackers to inject arbitrary web script or H
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
simplecam 1.2 - Directory Traversal
Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot ba
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gossamer Threads Links 2.x - 'User.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p p
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hosting Controller 0.6.1 - User Registration (1)
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - BlueTooth Directory Traversal
Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'display.php?psku' SQL Injection
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FishCart 3.1 - 'upstnt.php?cartid' SQL Injection
Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebCrossing WebX 5.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mtp-Target 1.2.2 Client - Remote Format String
Format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'basket.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mtp-Target Server 1.2.2 - Memory Corruption
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and poss
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'dl_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'page.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'dl_toprated.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'links_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'products.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.3 - 'pic_popular.asp' SQL Injection
Multiple SQL injection vulnerabilities in MaxWebPortal 2.x, 1.35, and other versions allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'product_details.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodetoSell ViArt Shop Enterprise 2.1.6 - 'news_view.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Enterprise 2.1.6 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlobalScape Secure FTP Server 3.0 - Remote Buffer Overflow
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a
50RISCO
abrir ↗Metasploit500
GlobalSCAPE Secure FTP Server Input Overflow
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Keyvan1 ImageGallery - Database Disclosure
Keyvan1 ImageGallery stores the image.mdb database under the web document root with insufficient access control, which a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ARPUS/Ce - Local Overflow (setuid)
Race condition in Ce/Ceterm (aka ARPUS/Ce) 2.5.4 and earlier allows local users to write to arbitrary files via a symlin
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.