Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin BuddyPress Plugin 1.5.x < 1.5.5 - SQL Injection
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Landshop 0.9.2 - Multiple Web Vulnerabilities
Multiple SQL injection vulnerabilities in SAMEDIA LandShop 0.9.2 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Java - AtomicReferenceArray Type Violation (Metasploit)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
coppermine 1.5.18 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote aut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
coppermine 1.5.18 - Multiple Vulnerabilities
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dalbum 144 build 174 - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SyndeoCMS 3.0.01 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZ Publish 4.x 'ezjscore' Module - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the textEncode function in classes/ezjscajaxcontent.php in eZ JS Core in eZ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Machines Forum (SMF) 2.0.2 - 'scheduled' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ocPortal 7.1.5 - 'code_editor.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in code_editor.php in ocPortal before 7.1.6 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KnFTPd 1.0.0 - 'FEAT' Denial of Service (PoC)
Buffer overflow in KnFTPd 1.0.0 allows remote authenticated users to cause a denial of service (crash) via a long string
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quest InTrust 10.4.x - Annotation Objects ActiveX Control 'AnnotateX.dll' Uninitialized Pointer Remote Code Execution
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TRENDnet SecurView TV-IP121WN Wireless Internet Camera - UltraMJCam ActiveX Control OpenFileDlg WideCharToMultiByte Remote Stack Buffer Overflow
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Integrator 1.32 - 'redirect_to' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allo
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PicoPublisher 2.0 - SQL Injection
Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Metasploit300
TRENDnet SecurView Internet Camera UltraMJCam OpenFileDlg Buffer Overflow
Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera
60RISCO
abrir ↗Metasploit200
Quest InTrust Annotation Objects Uninitialized Pointer
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quest InTrust 10.4.x - ReportTree / SimpleTree Classes
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TomatoCart 1.2.0 Alpha 2 - 'json.php' Local File Inclusion
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link DCS-5605 Network Surveillance - ActiveX Control 'DcsCliCtrl.dll' lstrcpyW Remote Buffer Overflow
Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NextBBS 0.6 - 'index.php?do' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in NextBBS 0.6 allows remote attackers to inject arbitrary web script or HTML v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NextBBS 0.6 - 'ajaxserver.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in ajaxserver.php in NextBBS 0.6 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraVNC 1.0.2 Client - 'vncviewer.exe' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Family CMS 2.9 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow re
23RISCO
abrir ↗Metasploit600
WordPress WP-Property PHP File Upload Vulnerability
WordPress Plugin WP-Property <= 1.35.0 PHP File Upload
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) - FTP USER Command Buffer Overflow (Metasploit)
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreePBX 2.9.0/2.10.0 - 'callmenum' Remote Code Execution (Metasploit)
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke
60RISCO
abrir ↗Exploit-DB
RealPlayer - '.mp4' file handling memory Corruption
mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Bu
23RISCO
abrir ↗Exploit-DB
Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the auth
23RISCO
abrir ↗Exploit-DB
Wolfcms 0.75 - Cross-Site Request Forgery / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.