Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.453exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.653VulnCheck XDB 9.134Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Movie PHP Script 2.0 - 'init.php?anticode' Code Execution
Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
flashlight free edition - Local File Inclusion / SQL Injection
SQL injection vulnerability in read.php in Flashlight Free Edition allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS 1.3.9 - 'cups/ipp.c' Null Pointer Dereference Denial of Service
The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Grades & Attendance 3.2.6 - Blind SQL Injection
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4 - 'reload()' Denial of Service
Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
flashlight free edition - Local File Inclusion / SQL Injection
Directory traversal vulnerability in admin.php in Flashlight Free Edition allows remote attackers to include and execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Grades & Attendance 3.2.6 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Online Grades & Attendance 3.2.6 and earlier allow (1) remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open-school 1.0 - 'id' SQL Injection
SQL injection vulnerability in the os_news module in Open-school (OS) 1.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Escon SupportPortal Pro 3.0 - 'tid' Blind SQL Injection
Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer 3.2 - 'IAManager.dll' Remote Buffer Overflow HeapSpray
Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP Football Pool 2.3 - Remote Database Disclosure
ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - Timezone Parsing Remote Integer Overflow
Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OCS Inventory NG 1.02 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure
R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, whi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RadCLASSIFIEDS Gold 2 - 'seller' SQL Injection
SQL injection vulnerability in index.php in RadCLASSIFIEDS Gold 2.0 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomlaequipment (com_juser) 2.0.4 - SQL Injection
SQL injection vulnerability in the Joomlaequipment (aka JUser or com_juser) component 2.0.4 for Joomla! allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Roxio CinePlayer 3.2 - 'SonicMediaPlayer.dll' Remote Buffer Overflow
Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Traidnt Up 2.0 - Cookie Authentication Bypass
Multiple SQL injection vulnerabilities in adminquery.php in Traidnt Up 2.0 allow remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
small pirate 2.1 - Cross-Site Scripting / SQL Injection
Multiple SQL injection vulnerabilities in Small Pirate (SPirate) 2.1 allow remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZeusCart 2.3 - 'maincatid' SQL Injection
SQL injection vulnerability in index.php in Zeus Cart 2.3 and earlier allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Arab Portal 2.2 - Authentication Bypass
Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
212Cafe WebBoard 2.90 Beta - Remote File Disclosure
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to rea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zen Help Desk 2.1 - Authentication Bypass
Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Million Dollar Text Links 1.0 - 'id' SQL Injection
SQL injection vulnerability in admin.link.modify.php in Million Dollar Text Links 1.0 and earlier allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'splice(2)' Double Lock Local Denial of Service
The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat 9.1.3 - Stack Exhaustion Denial of Service
Stack consumption vulnerability in Adobe Reader and Acrobat 9.1.3, 9.1.2, 9.1.1, and earlier 9.x versions; 8.1.6 and ear
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BaoFeng Storm 3.9.62 - '.Playlist' File Buffer Overflow (PoC)
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Impact Software AdPeeps 8.5d1 - Cross-Site Scripting / HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbit
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.