Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.679exploits catalogados
40.329CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4.547Metasploit 3.532✓ só verificadosrecentespopularesrisco
86.679 exploits
Exploit-DB
GraphicsMagick - Memory Disclosure / Heap Overflow
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image dir
28RISCO
abrir ↗GitHub PoC★ 5
Exploit for the linux kernel vulnerability CVE-2017-5123
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISCO
abrir ↗GitHub PoC★ 2
RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically.
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
tnftp - 'savefile' Arbitrary Command Execution (Metasploit)
The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 thro
50RISCO
abrir ↗Exploit-DB
GraphicsMagick - Memory Disclosure / Heap Overflow
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function
28RISCO
abrir ↗Exploit-DB
Logitech Media Server 7.9.0 - 'favorites' Cross-Site Scripting
Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. T
23RISCO
abrir ↗Exploit-DB
Debut Embedded HTTPd 1.20 - Denial of Service
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ
50RISCO
abrir ↗Metasploit400
Advantech WebAccess Webvrpcs Service Opcode 80061 Stack Buffer Overflow
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati
43RISCO
abrir ↗Metasploit300
Brother Debut http Denial Of Service
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ
50RISCO
abrir ↗VulnCheck XDB
initial-access
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISCO
abrir ↗Exploit-DB
Vir.IT eXplorer Anti-Virus 8.5.39 - 'VIAGLT64.SYS' Local Privilege Escalation
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability be
23RISCO
abrir ↗Exploit-DB
Cisco UCS Platform Emulator 3.1(2ePE1) - Remote Code Execution
A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewal
45RISCO
abrir ↗Exploit-DB
OctoberCMS 1.0.426 (Build 426) - Cross-Site Request Forgery
Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for po
23RISCO
abrir ↗GitHub PoC★ 3
tomcat-put-cve-2017-12615
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISCO
abrir ↗GitHub PoC★ 1
linux kernel exploit
Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
23RISCO
abrir ↗Exploit-DB
ZyXEL PK5001Z Modem - Backdoor Account
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access
28RISCO
abrir ↗Exploit-DB
Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection
The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Java SE - Web Start jnlp XML External Entity Processing Information Disclosure
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte
23RISCO
abrir ↗Exploit-DB
Joomla! Component Zh YandexMap 6.1.1.0 - 'placemarklistid' SQL Injection
The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parame
23RISCO
abrir ↗Exploit-DB
Protected Links - SQL Injection
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.
23RISCO
abrir ↗Exploit-DB
AROX School ERP PHP Script - 'id' SQL Injection
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
23RISCO
abrir ↗Exploit-DB
Sokial Social Network Script 1.0 - SQL Injection
Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.
23RISCO
abrir ↗Exploit-DB
Ingenious 2.3.0 - Arbitrary File Upload
my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.
23RISCO
abrir ↗Exploit-DB
Adult Script Pro 2.2.4 - SQL Injection
Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-200
23RISCO
abrir ↗Exploit-DB
Basic B2B Script - SQL Injection
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
23RISCO
abrir ↗Exploit-DB
iProject Management System 1.0 - 'ID' SQL Injection
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.
23RISCO
abrir ↗GitHub PoC
This is the Apache Struts CVE-2017-5638 struts 2 vulnerability. The same CVE that resulted in the equifax database breach.
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗Exploit-DB
Vastal I-Tech Dating Zone 0.9.9 - 'product_id' SQL Injection
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability
23RISCO
abrir ↗Exploit-DB
Job Board Script - 'nice_theme' SQL Injection
Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.
23RISCO
abrir ↗Exploit-DB
PG All Share Video 1.0 - SQL Injection
PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.