Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build
23RISCO
abrir ↗Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550
23RISCO
abrir ↗Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a B
23RISCO
abrir ↗Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. Thi
23RISCO
abrir ↗Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (f
23RISCO
abrir ↗Metasploit500
ToolTalk rpc.ttdbserverd _tt_internal_realpath Buffer Overflow (AIX)
Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.
43RISCO
abrir ↗Metasploit300
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Up
30RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.30 - 'tun_chr_pool()' Null Pointer Dereference
The tun_chr_poll function in drivers/net/tun.c in the tun subsystem in the Linux kernel 2.6.30 and 2.6.30.1, when the -f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear DG632 Router - Authentication Bypass
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
formmail 1.92 - Multiple Vulnerabilities
CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
formmail 1.92 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear DG632 Router - Remote Denial of Service
The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear DG632 Router - Authentication Bypass
Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmwar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 5.2.0e - Remote Code Execution
Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g Secure Enterprise Search - 'search_p_groups' Cross-Site Scripting
Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle WebLogic Server 10.3 - 'console-help.portal' Cross-Site Scripting
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scriptsez Easy Image Downloader - 'id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g Database - TNS Command Remote Denial of Service
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 11.1 - Database Network Foundation Heap Memory Corruption
Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g Database - Network Foundation Remote Overflow
Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g Database - Remote Network Authentication
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP ProCurve Threat Management Services - zl ST.1.0.090213 Module CRL Security Bypass
Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
4Images 1.7.7 - Filter Bypass HTML Injection / Cross-Site Scripting
Directory traversal vulnerability in global.php in 4images before 1.7.7, when magic_quotes_gpc is disabled, allows remot
23RISCO
abrir ↗Metasploit300
Green Dam URL Processing Buffer Overflow
Green Dam 3.17 URL Processing Buffer Overflow
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Desi Short URL Script - (Authentication Bypass) Insecure Cookie Handling
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
School Data Navigator - 'page' Local/Remote File Inclusion
PHP remote file inclusion vulnerability in app_and_readme/navigator/index.php in School Data Navigator allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_media_library 1.5.3 - Remote File Inclusion
PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_realestatemanager 1.0 - Remote File Inclusion
PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.
23RISCO
abrir ↗Metasploit600
Worldweaver DX Studio Player shell.execute() Command Execution
Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a p
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities
SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.