Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.933exploits catalogados
40.796CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.326VulnCheck XDB 10.507Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.940 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component JE Auto 1.0 - SQL Injection
SQL injection vulnerability in the JExtensions JE Auto (com_jeauto) component 1.0 for Joomla!, when magic_quotes_gpc is
23RISCO
abrir ↗Exploit-DB
VMware Tools - Update OS Command Injection
The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 3
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the rendering engine in Mozilla Firefox before 3.5.16 and 3.6.x b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Archiva 1.0 < 1.3.1 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Safe Search - 'v1' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-safe-search/wp-safe-search-jx.php in the Safe Search plugin 0.7 for WordP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 8 - CSS Parser Denial of Service
Use-after-free vulnerability in the CSharedStyleSheet::Notify function in the Cascading Style Sheets (CSS) parser in msh
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Processing Embed 0.5 - 'pluginurl' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wordpress-processing-embed/data/popup.php in the Processing Embed plugin 0.5
23RISCO
abrir ↗Exploit-DB
WonderWare InBatch 9.0sp1 - Buffer Overflow
Buffer overflow in the lm_tcp service in Invensys Wonderware InBatch 8.1 and 9.0, as used in Invensys Foxboro I/A Series
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zimplit CMS - 'zimplit.php?File' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zimplit CMS - 'English_manual_version_2.php?client' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU glibc - 'regcomp()' Stack Exhaustion Denial of Service
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3,
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation
The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation
The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is con
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 (RedHat / Ubuntu 10.04) - 'Full-Nelson.c' Local Privilege Escalation
The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs va
23RISCO
abrir ↗Metasploit600
Exim4 string_format Function Heap Buffer Overflow
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to exe
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Aigaion 1.3.4 - 'ID' SQL Injection
SQL injection vulnerability in indexlight.php in Aigaion 1.3.4 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Metasploit600
Exim4 string_format Function Heap Buffer Overflow
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specif
91RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - Client-Side Code Injection / Redirect Link Falsification
error.php in PhpMyAdmin 3.3.8.1, and other versions before 3.4.0-beta1, allows remote attackers to conduct cross-site sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ecommercemax Solutions Digital Goods Seller - SQL Injection
SQL injection vulnerability in shoppingcart.asp in Ecommercemax Solutions Digital-goods seller (DGS) 1.5 allows remote a
23RISCO
abrir ↗Exploit-DB
Pulse CMS Basic - Local File Inclusion
Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UnrealIRCd 3.2.8.1 - Backdoor Command Execution (Metasploit)
UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HotWebScripts HotWeb Rentals - 'resorts.asp' SQL Injection
SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gatesoft Docusafe 4.1.0 - SQL Injection
SQL injection vulnerability in ECO.asp in GateSoft DocuSafe 4.1.0 and 4.1.2 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
T-Dreams Cars Ads Package 2.0 - SQL Injection
SQL injection vulnerability in processview.asp in Techno Dreams (T-Dreams) Cars Ads Package 2.0 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
T-Dreams Job Seekers Package 3.0 - SQL Injection
SQL injection vulnerability in Resumes/TD_RESUME_Indlist.asp in Techno Dreams (T-Dreams) Job Career Package 3.0 allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - LDSS Dissector Buffer Overflow
Heap-based buffer overflow in the dissect_ldss_transfer function (epan/dissectors/packet-ldss.c) in the LDSS dissector i
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DotNetNuke 5.5.1 - 'InstallWizard.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow
Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageView
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - (Authenticated) User Code Execution (Metasploit)
A Windows NT local user or administrator account has a default, null, blank, or missing password.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.2 rc3 < 1.3.3b (FreeBSD) - Telnet IAC Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow rem
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.