Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Dopewars Server 1.5.12 - 'REQUESTJET' Message Remote Denial of Service
Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Rational RequisitePro 7.10 / ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM R
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Skybluecanvas 1.1 r237 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Rational RequisitePro 7.10 - 'ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp?Operation' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM R
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeDeCMS 5.1 - SQL Injection
SQL injection vulnerability in feedback_js.php in DedeCMS 5.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Palm Pre WebOS 1.1 - Denial of Service
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Everfocus 1.4 - EDSR Remote Authentication Bypass
The web interface for Everfocus EDR1600 DVR allows remote attackers to bypass authentication and access live cams via ce
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Achievo 1.3.4 - SQL Injection
SQL injection vulnerability in the get_employee function in classweekreport.inc in Achievo before 1.4.0 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZoIPer 2.22 - Call-Info Remote Denial of Service
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zainu 1.0 - 'searchSongKeyword' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Zainu 1.0 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclipse BIRT 2.2.1 - 'run?__report' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Achievo 1.3.4 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quick Heal 10.00 SP1 - Local Privilege Escalation
Quick Heal AntiVirus Plus 2009 10.00 SP1 and Quick Heal Total Security 2009 10.00 SP1 use weak permissions (Everyone: Fu
23RISCO
abrir ↗Metasploit400
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
Array index error in Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 might all
50RISCO
abrir ↗Metasploit400
Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x befor
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dream Poll 3.1 - '/index.php' Cross-Site Scripting / SQL Injection
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - 'deflate' HTTP Content Encoding Remote Code Execution
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute ar
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader 9.1.3 / Acrobat - COM Objects Memory Corruption Remote Code Execution
Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 allow attackers to cause a den
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Achievo 1.x - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Achievo before 1.4.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZRecipeZee CMS 91 - Remote File Inclusion
Directory traversal vulnerability in config/config.php in ezRecipe-Zee 91, when register_globals is enabled, allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx 1.4.5 - dot Character Remote File Disclosure
httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . (dot) charact
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Docebo 3.6.0.3 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Docebo 3.6.0.3 allow remote attackers to execute arbitrary SQL commands via (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DreamPoll 3.1 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in Dreamlevels DreamPoll 3.1 allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx 1.4 - GET Buffer Overflow
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Riorey RIOS 4.7.0 - Hard-Coded Password
RioRey RIOS 4.6.6 and 4.7.0 uses an undocumented, hard-coded username (dbadmin) and password (sq!us3r) for an SSH tunnel
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DreamPoll 3.1 - SQL Injection
Cross-site scripting (XSS) vulnerability in index.php in Dreamlevels DreamPoll 3.1 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 6.4 - 'pipeclose()'/'knlist_cleardel()' Race Condition
Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (
23RISCO
abrir ↗Metasploit400
Adobe FlateDecode Stream Predictor 02 Integer Overflow
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows rem
100RISCO
abrir ↗Metasploit400
Adobe FlateDecode Stream Predictor 02 Integer Overflow
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows rem
100RISCO
abrir ↗Metasploit500
HTTPDX h_handlepeer() Function Buffer Overflow
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote at
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.