Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.064exploits catalogados
37.667CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.044GitHub PoC 15.521VulnCheck XDB 9.080Nuclei 4.432Metasploit 3.505✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which
23RISCO
abrir ↗Exploit-DB
PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Infocus Real Estate Enterprise Edition Script - Authentication Bypass
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avast! 4.7 - 'aavmker4.sys' Local Privilege Escalation
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeRealty(Free Real Estate Listing Software) - Authentication Bypass
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.34 - 'find_keyring_by_name()' Local Memory Corruption
Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlie
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SmartSite 1.0.0 - Local File Inclusion
Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers t
43RISCO
abrir ↗Exploit-DB
Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openCourrier 2.02 and 2.03 beta, when register_global
23RISCO
abrir ↗Exploit-DB
Uiga Personal Portal - 'index.php' 'view' SQL Injection
SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JoomRadio 1.0 - SQL Injection
Multiple SQL injection vulnerabilities in the EXP JoomRadio (com_joomradio) component 1.0 for Joomla! allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4.0.5 (531.22.7) - Denial of Service
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke 0.764 Module modload - SQL Injection
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple cross-site scripting (XSS) vulnerabilities in index_search.php in 2daybiz Polls (aka Advanced Poll) Script allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenCominterne 1.01 - Local File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openComInterne 1.01, when register_globals is enabled
23RISCO
abrir ↗Exploit-DB
Kasseler CMS 2.0.5 - Bypass / Download Backup
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMScout 2.08 - SQL Injection
SQL injection vulnerability in index.php in CMScout 2.0.8 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB
Opencourrier 2.03beta - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when register_globals
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
Multiple SQL injection vulnerabilities in 2daybiz Polls (aka Advanced Poll) Script allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP System Management Homepage - 'RedirectUrl' Open Redirection
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to re
43RISCO
abrir ↗Exploit-DB
Invision Power Board - Denial of Service
index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unsp
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passwo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openfoncier 2.00 - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie Openfoncier 2.00, when register_globals is enabled, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZipWrangler 1.20 - '.zip' File (SEH)
Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie openPlanning 1.00, when register_globals is enabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openplanning 1.00 - Local File Inclusion / Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in openMairie openPlanning 1.00, when register_globals is enabled, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alstrasoft AskMe Pro 2.1 - 'que_id' SQL Injection
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.6 - HFS FileSystem (Denial of Service)
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openpresse 1.01 - Local File Inclusion
Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when register_globals is enabled, al
23RISCO
abrir ↗Exploit-DB
Madirish Webmail 2.01 - 'baseDir' Local/Remote File Inclusion
PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB
WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) - SQL Injection
SQL injection vulnerability in submitticket.php in WHMCompleteSolution (WHMCS) 4.2 allows remote attackers to execute ar
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.