Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.063exploits catalogados
40.808CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.076 exploits
Exploit-DB✓ VexDay Proof
BandSite CMS 1.1.4 - 'members.php' SQL Injection
Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authentic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JobHut 1.2 - 'pk' SQL Injection
SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pam-krb5 < 3.13 - Local Privilege Escalation
Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
glFusion 1.1.2 - 'COM_applyFilter()/order' SQL Injection
Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iWare CMS 5.0.4 - Multiple SQL Injections
SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.7.0 - 'NLST' Denial of Service
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument
50RISCO
abrir ↗Metasploit300
XM Easy Personal FTP Server 5.7.0 NLST DoS
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.2.1 - 'rename' Remote Buffer Overflow (SEH)
Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities
The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers
28RISCO
abrir ↗Metasploit600
phpMyAdmin Config File Code Injection
Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x be
23RISCO
abrir ↗Metasploit600
phpMyAdmin Config File Code Injection
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remo
100RISCO
abrir ↗Metasploit400
Adobe Collab.getIcon() Buffer Overflow
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows r
100RISCO
abrir ↗Metasploit300
IBM Access Support ActiveX Control Buffer Overflow
Stack-based buffer overflow in the GetXMLValue method in the IBM Access Support ActiveX control in IbmEgath.dll, as dist
50RISCO
abrir ↗Metasploit400
Adobe Collab.getIcon() Buffer Overflow
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows r
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-BLC 0.2.0 - 'get_read.php?section' SQL Injection
SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WBB3 rGallery 1.2.3 - 'UserGallery' Blind SQL Injection
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modif
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Codice CMS 2 - Command Execution (via SQL Injection)
SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zinf Audio Player 2.2.1 - '.pls' Universal Overwrite (SEH)
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ExpressionEngine 1.6 - Avtaar Name HTML Injection
Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow
Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbit
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xlight FTP Server 3.2 - 'user' SQL Injection
Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.3 - 'qorder' SQL Injection
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows
23RISCO
abrir ↗Metasploit300
Talkative IRC v0.4.4.16 Response Buffer Overflow
Talkative IRC v0.4.4.16 Response Buffer Overflow
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foxit Reader 3.0 (Build 1301) - PDF Universal Buffer Overflow
Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including 1120 and 1301, allows remote attackers to e
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YAP 1.1.1 - 'index.php' Local File Inclusion
Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SlySoft (Multiple Products) - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.