Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
id Software Doom 3 Engine - Console String Visualization Format String
Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FSD 2.052/3.000 - 'servinterface.cc servinterface::sendmulticast' 'PIcallsign' Command Remote Overflow
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ohesa Emlak Portal 1.0 - 'satilik.asp?Kategori' SQL Injection
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ohesa Emlak Portal 1.0 - 'detay.asp?Emlak' SQL Injection
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FSD 2.052/3.000 - 'sysuser.cc sysuser::exechelp' 'HELP' Remote Overflow
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP Product Catalog 1.0 - 'default.asp' SQL Injection
SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tor < 0.1.2.16 - ControlPort Remote Rewrite
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MD-Pro 1.0.76 - 'index.php' Firefox ID SQL Injection
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Arbitrary File Upload
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field fo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novus 1.0 - 'Buscar.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Metasploit500
CA BrightStor HSM Buffer Overflow
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4/2.6 (x86-64) - System Call Emulation Privilege Escalation
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Diff.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'edit.jsp?edittime' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpGB 1.46.2 - '/admin/emoticonlist.php?l_emoticonlist' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'UserPreferences.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Comment.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpGB 1.46.2 - '/admin/?l_username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Login.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'NewGroup.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpNews 2.41.3 - 'backurl' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpNews 2.41.3 - 'l_username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Metasploit400
IBM Tivoli Storage Manager Express CAD Service Buffer Overflow
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ask.com/AskJeeves Toolbar Toolbar 4.0.2.53 - ActiveX Remote Buffer Overflow
Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote attack vectors. NOTE: thi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Urchin 5.7.x - 'session.cgi' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5.7.03 and earlier allow
23RISCO
abrir ↗Metasploit300
Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow
Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media
50RISCO
abrir ↗Metasploit200
Xitami 2.5c2 Web Server If-Modified-Since Overflow
Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xen 3.0.3 - pygrub TOOLS/PYGRUB/SRC/GRUBCONF.PY Local Command Injection
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privil
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.