Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow (PoC) (2)
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in As
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow (PoC) (1)
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in As
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercur Messaging 2005 < SP4 - IMAP Remote (Egghunter)
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grandstream Budge Tone-200 IP Phone - Digest domain Denial of Service
The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla FireFox 1.5.x/2.0 - FTP PASV Port-Scanning
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to for
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Metasploit300
WinDVD7 IASystemInfo.DLL ActiveX Control Buffer Overflow
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio Ci
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FTPDMIN 0.96 - 'LIST' Remote Denial of Service
FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web Wiz Forums 8.05 - String Filtering SQL Injection
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Phone 7940/7960 - 'SIP INVITE' Remote Denial of Service
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities
Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZYXEL Router 3.40 Zynos - SMB Data Handling Denial of Service
ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LedgerSMB1.0/1.1 / SQL-Ledger 2.6.x - 'Login' Local File Inclusion / Authentication Bypass
Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
File(1) 4.13 - Command File_PrintF Integer Underflow
Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execut
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.15/3.5.16 - 'users.php' SQL Injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.15/3.5.16 - 'print.php' SQL Injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetVIOS Portal - 'page.asp' SQL Injection
SQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.15/3.5.16 - 'gallery.php' SQL Injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.15/3.5.16 - 'news.php' SQL Injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core < 2.1.2 - 'PHP_Self' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.1.6 - Mb_Parse_Str Function Register_Globals Activation
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPX 3.5.15/3.5.16 - 'forums.php' SQL Injection
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Holtstraeter Rot 13 - 'Enkrypt.php' Directory Traversal
Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Portal 10g - 'P_OldURL' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.6/5.2.1 - 'array_user_key_compare()' ZVAL dtor Local Overflow
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, w
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.