Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.864exploits catalogados
40.957CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.439VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.864 exploits
Exploit-DB✓ VexDay Proof
Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access
Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon
23RISCO
abrir ↗Metasploit300
RealPlayer rmoc3260.dll ActiveX Control Heap Corruption
The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Rea
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Panda Internet Security/AntiVirus+Firewall 2008 - 'CPoint.sys' Memory Corruption
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office 2000/2003/2004/XP - File Memory Corruption
Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 f
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'upload.php?path' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'dir2.php?path' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Neptune Web Server 3.0 - 404 Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.3.2 - '/wp-admin/invites.php?to' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'popup.php?path' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 4nChat Module 0.91 - 'roomid' SQL Injection
SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Check Point VPN-1 UTM Edge NGX 7.0.48x - Login Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microworld eScan Server 9.0.742 - Directory Traversal
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Manag
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Runtime Environment 1.x - Image Parsing Heap Buffer Overflow
Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ICQ Toolbar 2.3 - ActiveX Remote Denial of Service
toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yap Blog 1.1 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke KutubiSitte Module - 'kid' SQL Injection
SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Airspan ProST WiMAX Device - Web Interface Authentication Bypass
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication cr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Perforce Server 2007.3 - Multiple Remote Denial of Service Vulnerabilities
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android Web Browser - '.BMP' File Integer Overflow
Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android Web Browser - '.GIF' File Heap Buffer Overflow
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MG2 - 'list' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BSD PPP 'pppx.conf' - Local Denial of Service
Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Borland VisiBroker Smart Agent 08.00.00.C1.03 - Multiple Remote Vulnerabilities
Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TorrentTrader 1.08 - 'msg' HTML Injection
Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KC Wiki 1.0 - '/simplest/wiki.php?page' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KC Wiki 1.0 - '/minimal/wiki.php?page' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.