Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! 3.0.3 - 'remember.php' PHP Object Injection
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an o
23RISCO
abrir ↗Metasploit300
IBM SPSS SamplePower C1Tab ActiveX Heap Overflow
Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote attac
50RISCO
abrir ↗Metasploit600
phpMyAdmin Authenticated Remote Code Execution via preg_replace()
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Belkin F5D8236-4 Router - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Light HTTPd 0.1 (Windows) - Remote Buffer Overflow
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reques
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authentica
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated u
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.8/4.0.0-RC2 - Multiple Vulnerabilities
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RISCO
abrir ↗Exploit-DB
Hornbill Supportworks ITSM 1.0.0 - SQL Injection
SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GroundWork - 'monarch_scan.cgi' OS Command Injection (Metasploit)
monarch_scan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to ex
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TP-Link TL-WR1043N Router - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043ND_V1_12
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP Super Cache - PHP Remote Code Execution
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
28RISCO
abrir ↗Metasploit300
ERS Viewer 2011 ERS File Handling Buffer Overflow
Stack-based buffer overflow in the ERM_convert_to_correct_webpath function in ermapper_u.dll in ERDAS ER Viewer before 1
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and
95RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_civicrm 4.2.2 - Remote Code Injection
Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_civicrm 4.2.2 - Remote Code Injection
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer
60RISCO
abrir ↗Metasploit600
D-Link Devices Unauthenticated Remote Command Execution
D-Link Devices tools_vct.xgi Authenticated RCE
41RISCO
abrir ↗Metasploit200
Tincd Post-Authentication Remote TCP Stack Buffer Overflow
Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1pr
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link DIR-865L - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b
23RISCO
abrir ↗Exploit-DB
KrisonAV CMS 3.0.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attacker
23RISCO
abrir ↗Exploit-DB
KrisonAV CMS 3.0.1 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers
23RISCO
abrir ↗Exploit-DB
Java Web Start Launcher ActiveX Control - Memory Corruption
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allo
23RISCO
abrir ↗Exploit-DB
Java Web Start Launcher ActiveX Control - Memory Corruption
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 U
28RISCO
abrir ↗Exploit-DB
Oracle WebCenter Sites Satellite Server - HTTP Header Injection
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.
23RISCO
abrir ↗Metasploit600
WordPress W3 Total Cache PHP Code Execution
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pwstore - Denial of Service
AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.