Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.401exploits catalogados
35.511CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.332GitHub PoC 14.209VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
VietPHP - '_functions.php?dirpath' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - '/admin/index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VietPHP - 'index.php?language' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BIND 9 0.3beta - DNS Cache Poisoning
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolve
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
snif 1.5.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCat Networks Adonis 5.0.2.8 - TFTP Privilege Escalation
Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Panda AntiVirus 2008 - Local Privilege Escalation
Panda Antivirus 2008 stores service executables under the product's installation directory with weak permissions, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
J! Reactions 1.8.1 - comPath Remote File Inclusion
PHP remote file inclusion vulnerability in langset.php in J! Reactions (com_jreactions) 1.8.1 and earlier, a Joomla! com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 FAQ Module - 'mid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 EZSHOPINGCART Module - 'cid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lanius CMS 1.2.14 GALLERY Module - 'gid' SQL Injection
Multiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections
SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tor 0.1.2.15 - ControlPort Missing Authentication Unauthorized Access
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hunkaray Okul Portali 1.1 - 'Duyuruoku.asp' SQL Injection
SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebDirector - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk < 1.2.22/1.4.8 - IAX2 Channel Driver Remote Crash
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, A
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueSkyChat ActiveX Control 8.1.2 - Remote Buffer Overflow
Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - Chrome-Loaded About:Blank Script Execution
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebEvent 4.03 - 'Webevent.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'vote.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'titletext-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'index.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP cod
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Baidu Soba Search Bar 5.4 - 'BaiduBar.dll' ActiveX Control Remote Code Execution
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fail2ban 0.8 - Remote Denial of Service
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.