Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
Exploit-DB✓ VexDay Proof
VeryTools VideoSpirit Pro 1.70 - '.visprj' Local Buffer Overflow (Metasploit)
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 1.1.8 - ModPlug ReadS3M Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers t
50RISCO
abrir ↗Metasploit300
S40 0.4.2 CMS Directory Traversal Vulnerability
S40 CMS 0.4.2 Path Traversal
36RISCO
abrir ↗Metasploit200
VideoLAN VLC ModPlug ReadS3M Stack Buffer Overflow
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers t
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Redmine 1.0.1/1.1.1 - 'projects/hg-hellowword/news/' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote at
23RISCO
abrir ↗Exploit-DB
eyeos 2.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in framework/source/resource/qx/test/jsonp_primitive.php in QooxDoo 1.3 and pos
23RISCO
abrir ↗Exploit-DB
eyeos 2.3 - Multiple Vulnerabilities
Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other
23RISCO
abrir ↗Exploit-DB
OpenEMR 4.0.0 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB
WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
python-feedparser 5.0 - '/feedparser/feedparser.py' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser)
23RISCO
abrir ↗Metasploit400
Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 an
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)
Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server i
50RISCO
abrir ↗Exploit-DB
Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to injec
23RISCO
abrir ↗Metasploit300
Real Networks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Anzeigenmarkt 2011 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Metasploit500
Linux PolicyKit Race Condition Privilege Escalation
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privil
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPComp - encapsulation Kernel Memory Corruption
Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPs
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
InTerra Blog Machine 1.84 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWCM 2.x - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in AR Web Content Manager (AWCM) 2.1, 2.2, and possibly other ver
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
InTerra Blog Machine 1.84 - 'subject' HTML Injection
Cross-site scripting (XSS) vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB
PHPBoost 3.0 - Remote Download Backup
PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Andy's PHP KnowledgeBase 0.95.2 - 'viewusers.php' SQL Injection
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ICJobSite 1.1 - 'pid' SQL Injection
SQL injection vulnerability in ICloudCenter ICJobSite 1.1 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tracks 1.7.2 - URI Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Andy's PHP KnowledgeBase 0.95.4 - SQL Injection
SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote a
23RISCO
abrir ↗Exploit-DB
WordPress Plugin BackWPup - Remote Code Execution / Local Code Execution
PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows re
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 1.1.4 - 'AMV' Dangling Pointer (Metasploit)
libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe Hostname' CGI Buffer Overflow (Metasploit)
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' (MaxAge) CGI Buffer Overflow (Metasploit)
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows r
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.