Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/reset_password_save.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zimbra - 'aspell.php' Cross-Site Scripting
Zimbra 2013 has XSS in aspell.php
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/admin_index.php?q' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/checklogin.php?Username' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/reset_password.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/edit_user_save.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Address Book - '/addressbook/register/delete_user.php?id' SQL Injection
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Subversion 1.6.x - 'mod_dav_svn/lock.c' Remote Denial of Service
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote atta
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Subversion - Remote Denial of Service
The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial o
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome - Cookie Verification Denial of Service
Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set res
23RISCO
abrir ↗Exploit-DB
Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use-After-Free (PoC)
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox - Cookie Verification Denial of Service
Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FUDforum - Multiple Remote PHP Code Injection Vulnerabilities
PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
C2 WebResource - 'File' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
e107 - 'content_preset.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in e107 before 1.0.3 allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symphony - 'sort' SQL Injection
SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Aspen 0.8 - Directory Traversal
Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot
23RISCO
abrir ↗Exploit-DB
Network Weathermap 0.97a - 'editor.php' Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB
WordPress Plugin FuneralPress 1.1.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for Wor
23RISCO
abrir ↗Exploit-DB
AWS Xms 2.5 - 'importer.php?what' Directory Traversal
Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' paramete
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
jPlayer - 'Jplayer.swf' Script Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KNet Web Server 1.04b - Remote Buffer Overflow (SEH)
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possib
23RISCO
abrir ↗Exploit-DB
McAfee Virtual Technician (MVT) 6.5.0.2101 - Insecure ActiveX Method
An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows rem
23RISCO
abrir ↗Exploit-DB
SynConnect Pms - 'index.php?loginid' SQL Injection
SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Java CMM - Remote Code Execution (Metasploit)
The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.6.6 - 'index.php?conditions[usergroup][]' SQL Injection
SQL injection vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection
SQL injection vulnerability in awards.php in PsychoStats 3.2.2b allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClipShare 4.1.1 - Multiples Vulnerabilities
SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClipShare 4.1.1 - Multiples Vulnerabilities
SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.6.6 - 'index.php?conditions[usergroup][]' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/modules/user/users.php in MyBB (aka MyBulletinBoard) 1.6.6 allows remo
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.