Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdTag' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated admi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location propert
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location propert
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AceFTP 3.80.3 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP se
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UUSee 2008 - UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Metasploit200
Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possi
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
5th street - 'dx8render.dll' Format String
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Ste
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_topmenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'photos.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PEGames - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Perl - 'rmtree()' Function Local Insecure Permissions
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'cat.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_new_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities
Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'members.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'comments.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
World in Conflict 1.008 - Null Pointer Remote Denial of Service
World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and cra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'archive.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HoMaP-CMS 0.1 - 'plugin_admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.