Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'main.php?refer' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VeriSign Kontiki Delivery Management System 5.0 - 'action' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0 and earlier allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Website Directory - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AmpJuke 0.7.5 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dreamcost HostAdmin 3.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libxml2 - Denial of Service
libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-dep
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web serv
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI (EMR_COLORMATCHTOTARGETW) (MS08-021)
Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel (Fedora 8/9) - 'utrace_control' Null Pointer Dereference Denial of Service
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
Multiple eval injection vulnerabilities in phpScheduleIt before 1.2.11 allow remote attackers to execute arbitrary code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ADN Forum 1.0b - Blind SQL Injection
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Celoxis - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magic_quotes_gpc is disabled, allo
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
H-Sphere WebShell 4.3.10 - 'actions.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
A4Desk Event Calendar - 'eventid' SQL Injection
SQL injection vulnerability in A4Desk PHP Event Calendar allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WikyBlog 1.7.1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xen 3.3 - XenStore Domain Configuration Data Unsafe Storage
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not proper
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FAQ Management Script - 'catid' SQL Injection
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
A4Desk Event Calendar - 'v' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magic_quotes_gpc is disabled, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5 - Command Line Client HTML Special Characters HTML Injection
Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress MU 1.2/1.3 - '/wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CAcert - 'analyse.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in analyse.php in CAcert 20080921, and possibly other versions before 20080928,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Go
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Recipe Script - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClickBank Portal - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lyrics Script - 'search_results.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.