Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
Microsoft DebugDiag 1.0 - 'CrashHangExt.dll' ActiveX Control Remote Denial of Service
The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attack
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SonicWALL - Content Filtering Blocked Site Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 9.x - History Search and Links Panel Cross-Site Scripting
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dovecot 1.1.x - Invalid Message Address Parsing Denial of Service
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows
23RISCO
abrir ↗Metasploit100
DjVu DjVu_ActiveX_MSOffice.dll ActiveX ComponentBuffer Overflow
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers
50RISCO
abrir ↗Metasploit300
PacketTrap TFTP Server 2.2.5459.0 DoS
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of s
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Extrakt Framework 0.7 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PacketTrap TFTPD 2.2.5459.0 - Remote Denial of Service
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of s
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Metasploit500
MS08-067 Microsoft Server Service Relative Path Stack Corruption
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inj
23RISCO
abrir ↗Metasploit400
TugZip 3.5 Zip File Parsing Buffer Overflow Vulnerability
Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
H&H Solutions WebSoccer 2.80 - 'id' SQL Injection
SQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Elkagroup Image Gallery 1.0 - 'view.php' SQL Injection
SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
All In One 1.4 Control Panel - 'cp_polls_results.php' SQL Injection
SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Python 2.5.2 - 'Imageop' Module Argument Validation Buffer Overflow
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent atta
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - ' ' Address Bar URI Spoofing
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
bcoos 1.0.13 - 'click.php' SQL Injection
SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.0.1 - 'pmd_pdf.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.22 - 'ftruncate()'/'open()' Local Privilege Escalation
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a fi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Web Start 1.0/1.2 - Remote Command Execution
The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a f
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vicFTP 5.0 - 'LIST' Remote Denial of Service
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a NU
50RISCO
abrir ↗Metasploit300
Victory FTP Server 5.0 LIST DoS
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (fo
50RISCO
abrir ↗Metasploit300
Victory FTP Server 5.0 LIST DoS
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a NU
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iPeGuestbook 1.7/2.0 - 'pg' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Osprey 1.0a4.1 - 'ListRecords.php' Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0a4.1 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MindDezign Photo Gallery 2.2 - SQL Injection
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClipShare Pro 4.0 - 'fullscreen.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection
Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbi
38RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.