Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
MySQLDumper 1.24.4 - 'index.php?page' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQLDumper 1.24.4 - 'install.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia PC Suite Video Manager 7.1.180.64 - '.mp4' Denial of Service
Buffer overflow in the Video Manager in Nokia PC Suite 7.1.180.64 and earlier allows remote attackers to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CPE17 Autorun Killer 1.7.1 - Local Stack Buffer Overflow (Metasploit)
Buffer overflow in the readfile function in CPE17 Autorun Killer 1.7.1 and earlier allows physically proximate attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQLDumper 1.24.4 - 'restore.php?Filename' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Forum - 'id' Multiple SQL Injections
Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
gpEasy 2.3.3 - 'jsoncallback' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Volunteer management 1.0.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Zingiri Web Shop 2.4.0 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Volunteer management 1.0.2 - Multiple Vulnerabilities
SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Shadow Stream Recorder 3.0.1.7 - Local Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Mini-stream ASX to MP3 Converter 3.0.0.7 allow remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB
piwigo 2.3.3 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB
piwigo 2.3.3 - Multiple Vulnerabilities
Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mount.cifs - 'chdir()' Arbitrary Root File Identification
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the fil
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - MSCOMCTL ActiveX Buffer Overflow (MS12-027) (Metasploit)
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Ticket System Beta 1 - 'index.php?p' SQL Injection
SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB
Microsoft .NET Framework EncoderParameter - Integer Overflow (MS12-025)
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameter
35RISCO
abrir ↗Exploit-DB
RuggedCom Devices - Backdoor Access
RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address fi
23RISCO
abrir ↗Exploit-DB
RuggedCom Devices - Backdoor Access
RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component CCNewsLetter 1.0.7 - 'id' SQL Injection
SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for
23RISCO
abrir ↗Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
SQL injection vulnerability in hava_post.php in Havalite CMS 1.1.0 and earlier allows remote attackers to execute arbitr
23RISCO
abrir ↗Metasploit600
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebCalendar 1.2.4 - Remote Code Execution
Local file inclusion in WebCalendar before 1.2.5.
23RISCO
abrir ↗Exploit-DB
Havalite CMS 1.0.4 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB
Oracle GlassFish Server - REST Cross-Site Request Forgery
Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vTiger CRM 5.1.0 - Local File Inclusion
Directory traversal vulnerability in modules/com_vtiger_workflow/sortfieldsjson.php in vtiger CRM 5.1.0 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Samsung NET-i viewer 1.37.120316 allows remote attackers to cause a denial of service (infinite loop) via a negative siz
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.