Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dell SonicWALL Scrutinizer 9.0.1 - 'statusFilter.php?q' SQL Injection
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin chenpress - Arbitrary File Upload
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Cart Gold 4.5 - 'products_map.php?symb' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in products_map.php in X-Cart Gold 4.5 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AtMail Email Server Appliance 6.4 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Remote Code Execution
Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.FPX' File Parsing Heap Overflow
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Outside-In - '.LWP' File Parsing Stack Buffer Overflow
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Outside-In JP2 - File Parsing Heap Overflow
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allo
23RISCO
abrir ↗Metasploit300
Simple Web Server Connection Header Buffer Overflow
Simple Web Server Connection Header Buffer Overflow
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allo
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CodeIgniter 2.1 - 'xss_clean()' Filter Security Bypass
EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler '.XML' Local Privilege Escalation (MS10-092) (Metasploit)
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit Cross-Site Scripting Filter - 'Cross-Site ScriptingAuditor.cpp' Security Bypass
html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'launchAgent.do?return-To' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda SSL VPN - 'fileSystem.do' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta
23RISCO
abrir ↗Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows
23RISCO
abrir ↗Exploit-DB
libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to
23RISCO
abrir ↗Metasploit300
Cisco Linksys PlayerPT ActiveX Control SetSource sURL Argument Buffer Overflow
Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CakePHP 2.x < 2.2.0-RC2 - XML External Entity Injection
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via X
28RISCO
abrir ↗Metasploit300
WebPageTest Directory Traversal
www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of
18RISCO
abrir ↗Metasploit600
WebPageTest Arbitrary PHP File Upload
WebPageTest Arbitrary PHP File Upload RCE
63RISCO
abrir ↗Exploit-DB
Reserve Logic 1.2 Booking CMS - Multiple Vulnerabilities
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitr
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.