Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component com_jreservation 1.5 - 'pid' Blind SQL Injection
SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nephp Publisher Enterprise 4.5 - Authentication Bypass
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CF Shopkart 5.3x - 'itemID' SQL Injection
SQL injection vulnerability in index.cfm in CF ShopKart 5.4 beta allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_album 1.14 - Directory Traversal
Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote att
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSiteAdmin 0.9.7b - 'pageHeader.php?path' Remote File Inclusion
PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quiksoft EasyMail 6 - 'AddAttachment' Remote Buffer Overflow
Heap-based buffer overflow in the Quiksoft EasyMail Objects 6 ActiveX control allows remote attackers to execute arbitra
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Changetrack 4.3-3 - Local Privilege Escalation
changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filena
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSSMediaScript - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpPollScript 1.3 - 'include_class' Remote File Inclusion
PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PaoBacheca 2.1 - 'scrivi.php' URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PaoBacheca 2.1 - 'index.php' URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Zenas PaoBacheca Guestbook 2.1 allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PaoLink 1.0 - 'scrivi.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mega File Hosting Script 1.2 - 'emaillinks.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in emaullinks.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NaviCOPA Web Server 3.01 - Source Code Disclosure
InterVations NaviCOPA Web Server 3.01 allows remote attackers to obtain the source code for a web page via an HTTP reque
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD 5.0.1 - 'IRET' General Protection Fault Handling Privilege Escalation
The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SaphpLesson 4.3 - Blind SQL Injection
SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection
SQL injection vulnerability in the foobla Suggestions (com_foobla_suggestions) component 1.5.11 for Joomla! allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AdsDX 3.05 - Authentication Bypass
SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Elite Gaming Ladders 3.2 - 'platform' SQL Injection
SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.31 - 'perf_counter_open()' Local Buffer Overflow
Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local user
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BigAnt Server 2.50 SP1 - '.zip' Local Buffer Overflow (PoC)
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetAccess IP3 - (Authenticated) Ping Option Command Injection
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) ch
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.2.1 - GSM A RR Dissector packet.c Remote Denial of Service
Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.2.1 - OpcUa Dissector Resource Exhaustion (Denial of Service)
Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player < 0.9.6 - 'CUE' Local Buffer Overflow (PoC)
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC)
Buffer overflow in the gxmim1.dll ActiveX control in Novell Groupwise Client 7.0.3.1294 allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FileCOPA FTP Server 5.01 - 'NOOP' Denial of Service
FileCopa FTP Server 5.01 allows remote attackers to cause a denial of service (server hang) via a large number of crafte
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BigAnt Server 2.50 - GET Remote Buffer Overflow (SEH)
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
efront 3.5.4 - 'database.php?path' Remote File Inclusion
PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BigAnt Server 2.50 - GET Universal Remote Buffer Overflow (SEH)
Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows r
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.