Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB
AJ Article 3.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grafik CMS 1.1.2 - Multiple Cross-Site Request Forgery Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (2)
pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibTIFF 3.9.4 - Out-Of-Order Tag Type Mismatch Remote Denial of Service
The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that ha
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NaviCOPA Web Server 2.0.1 - URL Handling Buffer Overflow (Metasploit)
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HT
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 - CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit)
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows r
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Blue Coat WinProxy - Host Header Overflow (Metasploit)
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Style getElementsByTagName Memory Corruption (MS09-072) (Metasploit)
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'Aurora' Memory Corruption (MS10-002) (Metasploit)
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and S
100RISCO
abrir ↗Exploit-DB
TomatoCMS 2.0.5 - Multiple Cross-Site Request Forgery Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in TomatoCMS 2.0.6 allows remote attackers to hijack the authentication
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Edgephp ClickBank Affiliate Marketplace Script - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allow
23RISCO
abrir ↗Exploit-DB
Joomla! Component redSHOP 1.0 - 'pid' SQL Injection
SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Edgephp ClickBank Affiliate Marketplace Script - Multiple Vulnerabilities
SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
My Kazaam Notes Management System - Multiple Vulnerabilities
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
My Kazaam Notes Management System - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to in
23RISCO
abrir ↗Exploit-DB
My Kazaam Address & Contact ORGanizer - SQL Injection
SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause
23RISCO
abrir ↗Metasploit300
Apache Tomcat Transfer-Encoding Information Disclosure and DoS
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not properly handle an invalid Transfer-En
30RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpNews 2.47.3 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers t
23RISCO
abrir ↗Exploit-DB
Joomla! Component QuickFAQ 1.0.3 - Blind SQL Injection
SQL injection vulnerability in the QuickFAQ (com_quickfaq) component 1.0.3 for Joomla! allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB
Sun Java Web Server 7.0 u7 - Remote Overflow (DEP Bypass)
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft - 'MSHTML.dll' CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak
The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of pr
28RISCO
abrir ↗Exploit-DB
KMSoft GB - SQL Injection
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qt 4.6.3 - 'QSslSocketBackendPrivate::transmit()' Denial of Service
The QSslSocketBackendPrivate::transmit function in src_network_ssl_qsslsocket_openssl.cpp in Qt 4.6.3 and earlier allows
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux PAM 1.1.0 (Ubuntu 9.10/10.04) - MOTD File Tampering Privilege Escalation (1)
pam_motd (aka the MOTD module) in libpam-modules before 1.1.0-2ubuntu1.1 in PAM on Ubuntu 9.10 and libpam-modules before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BEA Weblogic - Transfer-Encoding Buffer Overflow (Metasploit)
Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 M
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
osCSS 1.2.2 - 'page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/currencies.php in osCSS 1.2.2, and probably earlier versions, allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Music Manager - Local File Inclusion
Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary f
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EA Battlefield 2 / Battlefield 2142 - Multiple Arbitrary File Upload Vulnerabilities
Multiple directory traversal vulnerabilities in the Refractor 2 engine, as used in Battlefield 2 1.50 (1.5.3153-802.0) a
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.