Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.331exploits catalogados
40.631CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.377Exploit-DB 24.489GitHub PoC 18.131VulnCheck XDB 10.218Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.331 exploits
Exploit-DB✓ VexDay Proof
PHP 5.3.8 - Remote Denial of Service
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memo
23RISCO
abrir ↗Exploit-DB
novell sentinel log manager 1.2.0.1 - Directory Traversal
Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlie
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari - GdiDrawStream Blue Screen of Death
The Graphics Device Interface (GDI) in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Window
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flirt-Projekt 4.8 - 'rub' SQL Injection
SQL injection vulnerability in rub2_w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seotoaster - SQL Injection
Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoaster_core/application/models/Log
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Capexweb 1.1 - SQL Injection
Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers
23RISCO
abrir ↗Exploit-DB
mPDF 5.3 - File Disclosure
Directory traversal vulnerability in examples/show_code.php in mPDF 5.3 and earlier allows remote attackers to read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Splunk - Remote Command Execution
mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Splunk - Remote Command Execution
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Splunk - Remote Command Execution
Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an envir
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - 'clients.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (2) (Metasploit)
The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitra
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - 'login[]' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - 'framed' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - 'contact_id' SQL Injection
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.100.1 - 'parent_id' SQL Injection
Multiple SQL injection vulnerabilities in BrowserCRM 5.100.01 and earlier allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoDeSys SCADA 2.3 - WebServer Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB
60RISCO
abrir ↗Metasploit300
MS11-093 Microsoft Windows OLE Object File Handling Remote Code Execution
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote a
60RISCO
abrir ↗Metasploit300
IpSwitch WhatsUp Gold TFTP Directory Traversal
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read a
50RISCO
abrir ↗Metasploit600
Traq admincp/common.php Remote Code Execution
Traq 2.0–2.3 admincp/common.php RCE
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser < 11.60 - Denial of Service / Multiple Vulnerabilities
Opera before 11.60 does not properly handle certificate revocation, which has unspecified impact and remote attack vecto
23RISCO
abrir ↗Metasploit600
Splunk Search Remote Code Execution
mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python
43RISCO
abrir ↗Exploit-DB
zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal
Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary dir
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow re
23RISCO
abrir ↗Exploit-DB
Acpid 1:2.0.10-1ubuntu2 (Ubuntu 11.04/11.10) - Boundary Crossing Privilege Escalation
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows l
23RISCO
abrir ↗Exploit-DB
CSF Firewall - Buffer Overflow (PoC)
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.