Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
cPanel 10.9.x - 'Fantastico' Local File Inclusion
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostNuke Module phgstats 0.5 - 'phgdir' Remote File Inclusion
phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftNews 4.1/5.5 - '/engine/Ajax/editnews.php?root_dir' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Premod SubDog 2 - '/includes/themen_portal_mitte.php?phpbb_root_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP co
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Premod SubDog 2 - '/includes/logger_engine.php?phpbb_root_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP co
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Premod SubDog 2 - '/includes/functions_kb.php?phpbb_root_path' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP co
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.0 - EXT/Filter FDF Post Filter Bypass
The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NukeSentinel 2.5.06 - SQL Injection
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftNews 4.1/5.5 - '/engine/init.php?root_dir' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Omnikey Cardman 4040 Driver - Local Buffer Overflow (PoC)
Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040 driver in the Linux kernel
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 5.0.x - Single Row SubSelect Remote Denial of Service
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion
PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Duyuru Scripti - 'Goster.asp' SQL Injection
SQL injection vulnerability in goster.asp in fystyq Duyuru Scripti allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.0 / PHP with PECL ZIP 1.8.3 - 'zip://' URL Wrapper Buffer Overflow
Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.1
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grayscale Blog 0.8.0 - Security Bypass / SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grayscale Blog 0.8.0 - Security Bypass / SQL Injection / Cross-Site Scripting
Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grayscale Blog 0.8.0 - Security Bypass / SQL Injection / Cross-Site Scripting
SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBSD 3.x/4.x - ICMPv6 Packet Handling Remote Buffer Overflow
Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragme
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - FTP Server Response Denial of Service (MS07-016)
The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitr
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 2.0.0.2 - Document.Cookie Path Argument Denial of Service
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rediff Toolbar - ActiveX Control Remote Denial of Service
The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via uns
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FiSH-irssi - Multiple Remote Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader Plugin 'AcroPDF.dll' 8.0.0.0 - Resource Consumption
AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to caus
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
radscan conquest 8.2 - Multiple Vulnerabilities
Multiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges by querying a metaserver
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mod_security 2.1.0 - ASCIIZ byte POST Rules Bypass
Interpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers to bypass request rules
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Silc Server 1.0.2 - New Channel Remote Denial of Service
The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinZip 10.0.7245 - FileView ActiveX Buffer Overflow (2)
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.01b - 'check' Buffer Overflow (PoC)
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Firebug 1.03 - Rep.JS Script Code Injection
Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug exte
23RISCO
abrir ↗Metasploit300
Mercury/32 4.01 IMAP LOGIN SEH Buffer Overflow
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.