Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.559exploits catalogados
34.978CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.960VulnCheck XDB 8.542Nuclei 4.243Metasploit 3.472✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component Juke Box 1.7 - Local File Inclusion
Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) component 1.0 and 1.7 for Joomla! allows remote
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion
Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_joomlaflickr) component 1.0.3 for Joomla
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Freestyle FAQ Lite 1.3 - 'faqid' SQL Injection
SQL injection vulnerability in the Freestyle FAQs Lite (com_fsf) component, possibly 1.3, for Joomla! allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin NextGEN Gallery 1.5.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Highslide 1.5 - Local File Inclusion
Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion
Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when ma
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Shoutbox Pro - Local File Inclusion
Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component for Joomla! allows remote attackers to re
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JInventory 1.23.02 - Local File Inclusion
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.24 (Solaris) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.10 (OSX) - 'lsa_io_trans_names' Heap Overflow (Metasploit)
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component LoginBox - Local File Inclusion
Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to re
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SVMap 1.1.1 - Local File Inclusion
Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Magic Updater - Local File Inclusion
Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component redSHOP 1.0 - Local File Inclusion
Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to re
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nodesforum 1.033 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Nodesforum 1.033 and 1.045, when register_globals is enabled, allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eZip Wizard 3.0 - '.zip' File (SEH)
Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .z
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component redTWITTER 1.0 - Local File Inclusion
Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZipCentral - '.zip' File (SEH)
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa 2.0 - Local File Inclusion
Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Proxy - Remote File Inclusion
PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when register_globals is enabled, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Facil-CMS 0.1RC2 - Local/Remote File Inclusion
Multiple directory traversal vulnerabilities in Facil CMS 0.1RC allow remote attackers to read arbitrary files via a ..
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IncrediMail 2.0 - ActiveX (Authenticated) Buffer Overflow (PoC)
Buffer overflow in the Authenticate method in the INCREDISPOOLERLib.Pop ActiveX control in ImSpoolU.dll in IncrediMail 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JP Jobs 1.4.1 - SQL Injection
SQL injection vulnerability in the JP Jobs (com_jp_jobs) component 1.4.1 and earlier for Joomla! allows remote attackers
23RISCO
abrir ↗Exploit-DB
PHP-fusion dsmsf Mod Downloads - SQL Injection
SQL injection vulnerability in screen.php in the Download System mSF (dsmsf) module for PHP-Fusion allows remote attacke
23RISCO
abrir ↗Exploit-DB
Microsoft Internet Explorer Tabular Data Control - ActiveX Remote Code Execution
The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 - '.wav' Local Overflow
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISCO
abrir ↗Exploit-DB
DynPG CMS 4.1.0 - 'popup.php' / 'counter.php' Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RISCO
abrir ↗Exploit-DB
CMS Made Simple 1.7 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RISCO
abrir ↗Exploit-DB
DynPG CMS 4.1.0 - Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, and possibly earlier, when magic_quotes_gpc is di
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.