Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Metasploit600
Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.
50RISCO
abrir ↗Exploit-DB
ZPanel - 'templateparser.class.php' Crafted Template Remote Command Execution
ZPanel through 10.1.0 has Remote Command Execution
43RISCO
abrir ↗Exploit-DB
CMSLogik 1.2.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.1 - Tracing Multiple Local Denial of Service Vulnerabilities
The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer
23RISCO
abrir ↗GitHub PoC★ 1
Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959
The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attacke
60RISCO
abrir ↗GitHub PoC★ 1
Discover uPNP devices vulnerable to CVE-2013-0229 / CVE-2013-0230 / CVE-2012-5958 / CVE-2012-5959
Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to injec
23RISCO
abrir ↗Exploit-DB
ircd-hybrid 8.0.5 - Denial of Service
The try_parse_v4_netmask function in hostmask.c in IRCD-Hybrid before 8.0.6 does not properly validate masks, which allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nagios Remote Plugin Executor - Arbitrary Command Execution (Metasploit)
Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote att
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 2.0 - Stack Buffer Overflow (Denial of Service) (PoC)
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KNet Web Server 1.04b - Stack Corruption Buffer Overflow
Buffer overflow in Stormy Studios Knet 1.04c and earlier allows remote attackers to cause a denial of service and possib
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple HRM System 2.3 - Multiple Vulnerabilities
SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Spider Video Player - 'theme' SQL Injection
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote
23RISCO
abrir ↗Metasploit600
Ruby on Rails Known Secret Session Cookie Remote Code Execution
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Request Tracker - 'ShowPending' SQL Injection
SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and pos
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authenticat
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted dir
83RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Spiffy XSPF Player - 'playlist_id' SQL Injection
SQL injection vulnerability in playlist.php in the Spiffy XSPF Player plugin 0.1 for WordPress allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earli
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZAPms 1.41 - SQL Injection
SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - 'tbl_gis_visualization.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might
23RISCO
abrir ↗Metasploit600
MiniWeb (Build 300) Arbitrary File Upload
MiniWeb <= Build 300 Arbitrary File Upload
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS 3.x - FAQ Module Persistent Cross-Site Scripting
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10 SP3/11 SP2 - Remote Execution (Metasploit)
The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a
60RISCO
abrir ↗Exploit-DB
Sophos Web Protection Appliance 3.7.8.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inj
23RISCO
abrir ↗Exploit-DB
WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - 'grouppay.php?hash' SQL Injection
SQL injection vulnerability in the gp_LoadUserFromHash function in functions_hash.php in the Group Pay module 1.5 and ea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MongoDB 2.2.3 - nativeHelper.apply Remote Code Execution
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMo
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.