Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
PHD Help Desk 1.43 - 'atributo_list.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Webee Comments 1.1/1.2 - 'index2.php' articleId SQL Injection
SQL injection vulnerability in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allows re
23RISCO
abrir ↗Metasploit600
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows remote attackers to execute arbitrary programs via a SceneU
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BibTeX - '.bib' File Handling Memory Corruption
Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and cr
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server - 'APPE' / 'DELE' Denial of Service
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server - 'APPE' / 'DELE' Denial of Service
XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (crash) by uploading or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow
Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee Network Security Manager < 5.1.11.8.1 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Secu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service
neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell eDirectory 8.8 - '/dhost/modules?I:' Remote Buffer Overflow
Stack-based buffer overflow in the dhost module in Novell eDirectory 8.8 SP5 for Windows allows remote authenticated use
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Messenger 9.0.0.2162 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service
An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.32 - 'pipe.c' Local Privilege Escalation (4)
Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yahoo! Messenger 9 - 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service
An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0 versions, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 < 2008 - Embedded OpenType Font Engine Remote Code Execution (MS09-065) (Metasploit)
win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 7/2008 R2 - Remote Kernel Crash
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS - 'kerberos' Cross-Site Scripting
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly h
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core < 2.8.5 - Unrestricted Arbitrary File Upload / Arbitrary PHP Code Execution
Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress befor
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free Download Manager - '.Torrent' File Parsing Multiple Buffer Overflow Vulnerabilities (Metasploit)
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Bui
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)
Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote attackers to cause a denial of service via a long argument to th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.6 - 'from_date_day' Full Path Disclosure
CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an inval
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.6 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to obtain sensitive information via an inval
23RISCO
abrir ↗Metasploit400
MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Conv
100RISCO
abrir ↗Metasploit300
Microsoft Windows EOT Font Table Directory Integer Overflow
win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse fon
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews 8 and 8b, when magic_
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.6 editnews Module - doeditnews Action Admin Moderation Bypass
The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magic_quotes_gpc is disabled, allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews and UTF-8 CuteNews - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.4.6 - 'result' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.