Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.453exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9.134Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Linea21 1.2.1 - 'search' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?go' Remote File Inclusion
PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'vote.php?descr' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tausch Ticket Script 3 - 'suchauftraege_user.php?userid' SQL Injection
Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Swinger Club Portal - 'start.php?id' SQL Injection
SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Multiple LaserJet Printer - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Jetdirect and the Embedded Web Server (EWS) on certain HP LaserJe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rentventory - Multiple SQL Injections
SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - 'albumID' SQL Injection
SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opial 1.0 - Authentication Bypass
SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authentica
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure
The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.lst' / '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ARD-9808 DVR Card Security Camera - GET Remote Denial of Service
The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AudioPLUS 2.00.215 - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator 2.0 - '.plf' Universal Buffer Overflow (SEH)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
kervinet forum 1.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PEamp 1.02b - '.m3u' Local Buffer Overflow (PoC)
Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS chainuk 1.2 - Multiple Vulnerabilities
Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (1)
Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Profession
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Related Sites 2.1 - Blind SQL Injection
SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.