Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine ServiceDesk Plus 8.1 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
afterlogic mailsuite pro (VMware Appliance) 6.3 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.10.18 - 'index.php' SQL Injection
SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'member_id' Validation Password Manipulation
The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
escon supportportal pro 3.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB
Openconstructor CMS 3.12.0 - 'id' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 - Default MySQL Credential (Metasploit)
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS Open Technology Real Services 3.1.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.10.18 - 'unconfirmed' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
winwebmail server 3.8.1.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TCExam 11.2.x - '/admin/code/tce_edit_question.php?subject_module_id' SQL Injection
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alligra Calligra - Heap Buffer Overflow
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import f
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dir2web - '/system/src/dispatcher.php?oid' SQL Injection
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TCExam 11.2.x - '/admin/code/tce_edit_answer.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle AutoVue - ActiveX Control SetMarkupMode Buffer Overflow (Metasploit)
Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows rem
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - 'confirm.php?q' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - '/data/file/edit.php?result' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Constructor - '/users/users.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Linksys PlayerPT - ActiveX Control SetSource sURL argument Buffer Overflow (Metasploit)
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9 - SQL Injection (Metasploit)
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RISCO
abrir ↗Exploit-DB
FreeBSD - SCTP Remote NULL Ptr Dereference Denial of Service
The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mahara 1.4.1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.4.3 - PDO Memory Access Violation Denial of Service
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Fixed Table Col Span Heap Overflow (MS12-037) (Metasploit)
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RISCO
abrir ↗Exploit-DB
Nvidia Linux Driver - Local Privilege Escalation
The NVIDIA UNIX driver before 295.40 allows local users to access arbitrary memory locations by leveraging GPU device-no
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.