Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
DirectAdmin 1.292 - 'CMD_USER_STATS' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'msgeng.exe' Remote Stack Overflow
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve B
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WarFTP 1.65 (Windows 2000 SP4) - 'USER' Remote Buffer Overflow
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Horde Framework and IMP 2.x/3.x - Cleanup Cron Script Arbitrary File Deletion
Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Fram
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Orion-Blog 2.0 - Remote Authentication Bypass
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec 'SYMTDI.SYS' Device Driver - Local Denial of Service
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Horde IMP Webmail 4.0.4 Client - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 2.x - 'usergroups.php' SQL Injection
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Horde Framework 3.1.3 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Absolute Image Gallery 2.0 - 'gallery.asp?categoryId' SQL Injection
SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Viper Web Portal 0.1 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting
Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aBitWhizzy - 'whizzylink.php?d' Traversal Arbitrary Directory Listing
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a ..
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiniGZip - Controls File_Compress Buffer Overflow
Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-depend
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.0/5.2.1 - Rejected Session ID Double-Free
Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 - 'session_regenerate_id()' Double-Free
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WarFTP 1.65 (Windows 2000 SP4) - 'USER' Remote Buffer Overflow
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aBitWhizzy - 'whizzypic.php?d' Traversal Arbitrary Directory Listing
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a ..
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zomplog 3.7.6 (Windows x86) - Local File Inclusion
Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5.x/6.0.x - Directory Traversal
Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using c
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JGBBS 3.0beta1 - 'search.asp?author' SQL Injection
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000 - 'WinMM.dll' / '.WAV' Remote Denial of Service
winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) via
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CARE2X 1.1 - 'ROOT_PATH' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to execute arbitrary PHP code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GE
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClipShare 1.5.3 - 'ADODB-Connection.Inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in include/adodb-connection.inc.php in ClipShare 1.5.3 allows remote attackers t
23RISCO
abrir ↗Metasploit400
D-Link TFTP 1.0 Long Filename Buffer Overflow
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GE
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.0 (OSX) - EXT/Filter Space Trimming Buffer Underflow
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by pas
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2 - EXT/Filter Function Remote Buffer Overflow
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows contex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OES (Open Educational System) 0.1beta - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow remote attackers to exec
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.