Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Metasploit600
Oracle VM Server Virtual Server Agent Command Injection
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confi
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Collabtive 0.65 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OrangeHRM 2.6.0.1 - Local File Inclusion
Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BaconMap 1.0 - Local File Disclosure
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BaconMap 1.0 - SQL Injection
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion Mod Mg User Fotoalbum 1.0.1 - SQL Injection
SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Site2Nite Auto e-Manager - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX EvoCam Web Server - GET Buffer Overflow (Metasploit)
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)
Buffer overflow in the web server for EvoLogical EvoCam 3.6.6 and 3.6.7 allows remote attackers to execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
hplip - 'hpssd.py' From Address Arbitrary Command Execution (Metasploit)
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Community Builder Enhanced (CBE) 1.4.8/1.4.9/1.4.10 - Local File Inclusion / Remote Code Execution
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClamAV Milter - Blackhole-Mode Remote Code Execution (Metasploit)
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime (Mac OSX) - RTSP Content-Type Overflow (Metasploit)
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Pwngame - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xWeblog 2.2 - 'arsiv.asp?tarih' SQL Injection
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OPEN IT OverLook 5 - 'title.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flex Timesheet - Authentication Bypass
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute a
23RISCO
abrir ↗Metasploit300
Barracuda Multiple Product "locale" Directory Traversal
Barracuda Spam & Virus Firewall "locale" Path Traversal
36RISCO
abrir ↗Exploit-DB
libc/glob(3) - Resource Exhaustion / Remote ftpd-anonymous (Denial of Service)
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xWeblog 2.2 - 'oku.asp?makale_id' SQL Injection
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat and Reader - Array Indexing Remote Code Execution
Array index error in Adobe Reader and Acrobat 8.x before 8.2.5 and 9.x before 9.4 on Mac OS X allows attackers to execut
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX LPD - Command Execution (Metasploit)
Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of ser
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Club Manager - 'cm_id' SQL Injection
SQL injection vulnerability in the Club Manager (com_clubmanager) component for Joomla! allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft ASP.NET - Padding Oracle (MS10-070)
Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Intern
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SlimFTPd - 'LIST' Concatenation Overflow (Metasploit)
Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlobalScape Secure FTP Server - Input Overflow (Metasploit)
Buffer overflow in GlobalSCAPE Secure FTP Server 3.0.2 allows remote authenticated users to execute arbitrary code via a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Workstation Service - NetpManageIPCConnect Overflow (MS06-070) (Metasploit)
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Wi
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.