Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.644exploits catalogados
40.922CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.560Exploit-DB 24.489GitHub PoC 18.407VulnCheck XDB 11.064Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.644 exploits
Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NASM 2.0 - 'ppscan()' Off-by-One Buffer Overflow
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to crea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Classic FTP 1.02 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not proper
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Screen 4.0.3 (OpenBSD) - Local Authentication Bypass
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_m
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/customResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Metasploit300
VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OCX
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP serv
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service
Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsConnectionNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsDestinationNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/Applications/lifecycleModulesNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Metasploit300
Novell iPrint Client ActiveX Control Buffer Overflow
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcConnectionPoolNew1.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.