Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acc Statistics 1.1 - Insecure Cookie Handling
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acc Statistics 1.1 - Insecure Cookie Handling
Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) usernam
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chilkat Crypt - ActiveX Arbitrary File Creation/Execution
The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acc Autos 4.0 - Insecure Cookie Handling
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acc Autos 4.0 - Insecure Cookie Handling
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pppBlog 0.3.11 - File Disclosure
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acc Real Estate 4.0 - Insecure Cookie Handling
admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Short Url & Url Tracker - SQL Injection
SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Graugon PHP Article Publisher Pro 1.5 - Insecure Cookie Handling
admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrativ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GE Fanuc Real Time Information Portal 2.6 - 'writeFile()' API (Metasploit)
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote at
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YourFreeWorld Banner Management - SQL Injection
SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpWebSite 0.9.3 - 'links.php' SQL Injection
SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tribiq CMS 5.0.10a (Windows) - Local File Inclusion
Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Logz podcast CMS 1.3.1 - 'art' SQL Injection
Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft DebugDiag 1.0 - 'CrashHangExt.dll' ActiveX Control Remote Denial of Service
The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attack
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PacketTrap TFTPD 2.2.5459.0 - Remote Denial of Service
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of s
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Elkagroup Image Gallery 1.0 - 'view.php' SQL Injection
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.