Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.30 - 'atalk_getname()' 8-bytes Stack Disclosure (1)
The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows lo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
SQL injection vulnerability in rss.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoGirls - 'view.php?p' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Discuz! Plugin Crazy Star 2.0 - 'fmid' SQL Injection
SQL injection vulnerability in plugin.php in the Crazy Star plugin 2.0 for Discuz! allows remote authenticated users to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSANE 0.5.0 - 'save.php' Remote File Inclusion
PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PAD Site Scripts 3.6 - 'list.php?string' SQL Injection
Multiple cross-site scripting (XSS) vulnerabilities in PAD Site Scripts 3.6 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
totalcalendar 2.4 - Blind SQL Injection / Local File Inclusion
Directory traversal vulnerability in box_display.php in TotalCalendar 2.4 allows remote attackers to read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Auction RSS Content Script - 'search.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to
23RISCO
abrir ↗Metasploit300
ProFTP 2.9 Banner Remote Buffer Overflow
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execu
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTP 2.9 - Welcome Message Remote Buffer Overflow (Metasploit)
Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execu
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Turnkey Arcade Script - SQL Injection (2)
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.31-rc7 - 'AF_LLC getsockname' 5-Byte Stack Disclosure
The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel 2.6.31-rc7 and earlier does not initialize a certain
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service
A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EMO Breader Manager - 'video.php?movie' SQL Injection
SQL injection vulnerability in video.php in EMO Breeder Manager (aka EMO Breader Manager) allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_siirler 1.2 - 'sid' SQL Injection
SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH)
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Turnkey Arcade Script - SQL Injection (2)
SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fat Player 0.6b - '.wav' Universal Local Buffer
Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moa Gallery 1.1.0 - 'gallery_id' SQL Injection
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4/2.6 (RedHat Linux 9 / Fedora Core 4 < 11 / Whitebox 4 / CentOS 4) - 'sock_sendpage()' Ring0 Privilege Escalation (5)
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audacity 1.2 - '.gro' Universal Buffer Overflow (Egghunter)
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacit
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Radvision Scopia - '/entry/index.jsp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in entry/index.jsp in Radvision Scopia 5.7, and possibly other versions before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ITechBids 8.0 - 'ProductID' Blind SQL Injection
Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling
Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH)
telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and (1) delete arbitrary pages via a mo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Uebimiau Webmail 3.2.0-2.0 - Arbitrary Database Disclosure
Uebimiau Webmail 3.2.0-2.0 stores sensitive information under the web root with insufficient access control, which allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
New5starRating 1.0 - 'rating.php' SQL Injection
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_jtips 1.0.x - 'season' Blind SQL Injection
SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lanai Core 0.6 - Remote File Disclosure / Info Disclosure
Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Faslo Player 7.0 - '.m3u' Local Buffer Overflow (PoC)
Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash)
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.