Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.453exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9.134Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Uiga Church Portal - 'year' SQL Injection
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
E-Gold Game Series: Pirates of The Caribbean - Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Uiga Church Portal - 'year' SQL Injection
SQL injection vulnerability in index.php in Uiga Church Portal allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP-Syntax 0.9.1 - Remote Command Execution
WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
StandAloneArcade 1.1 - 'gamelist.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_digifolio 1.52 - 'id' SQL Injection
SQL injection vulnerability in the DigiFolio (com_digifolio) component 1.52 for Joomla! allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Smart ASP Survey - 'catid' SQL Injection
SQL injection vulnerability in showresult.asp in Smart ASP Survey allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wap-motor - 'image' Directory Traversal
Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Auction RSS Content Script - 'rss.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JCE-Tech SearchFeed Script - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech SearchFeed Script allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Auction RSS Content Script - 'search.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DigiOz Guestbook 1.7.2 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in DigiOz Guestbook 1.7.2 allows remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'forum.php?t' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSANE 0.5.0 - 'save.php' Remote File Inclusion
PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'profile.php?profile_name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'view.php?p' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
Multiple SQL injection vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JCE-Tech PHP Video Script - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in JCE-Tech PHP Video Script allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.2.0 - 'p_filename' Remote File Disclosure
Directory traversal vulnerability in sources/_template_parser.php in Moa Gallery 1.2.0 and earlier allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.2.0 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Turnkey Arcade Script - SQL Injection (2)
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EMO Breader Manager - 'video.php?movie' SQL Injection
SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service
A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH)
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.