Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.524exploits catalogados
37.962CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.675VulnCheck XDB 9.136Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'index.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yogurt Social Network 3.2 rc1 Module for XOOPS - 'album.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenVms 8.3 Finger Service - Stack Buffer Overflow
Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'order.asp?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'anket_yonetim.php?portal_ayarlarportal_dili' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Battle.net Clan Script 1.5.x - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disab
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Noticeware Email Server 4.6 - NG LOGIN Messages Denial of Service
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (da
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKF-Portal 1.10 - 'baslik.php?tema_dizin' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpKF-Portal 1.10 allow remote attackers to include arbitrary files via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice - 'search.asp?Filename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'browsecats.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
8E6 Technologies R3000 - Host Header Internet Filter Security Bypass
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host heade
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'image_desc.php?latest' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'changepassword.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'adminhome.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'suggest_image.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'cleanup.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pluck CMS 4.5.2 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Softbiz Image Gallery - 'config.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Crafty Syntax Live Help 2.14.6 - 'livehelp_js.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
POWERGAP ShopSystem - 's03.php' SQL Injection
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UNAK-CMS 1.5 - 'connector.php' Local File Inclusion
Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in UN
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pcshey Portal - 'kategori.asp' SQL Injection
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XAMPP Linux 1.6 - 'ming.php?text' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Homes 4 Sale - 'results.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject a
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.