Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
PHP 4 - Userland ZVAL Reference Counter Overflow (PoC)
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitra
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HyperBook Guestbook 1.3 - GBConfiguration.DAT Hashed Password Information Disclosure
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access con
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 1.3.34/1.3.33 (Ubuntu / Debian) - CGI TTY Privilege Escalation
The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd fro
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EmbeddedWB Web Browser ActiveX Control - Remote Code Execution
Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary cod
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Acrobat/Adobe Reader 7.0.9 - Information Disclosure
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kiwi CatTools TFTP 3.2.8 - Directory Traversal
Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Audit Subsystems Local Denial of Service
The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection
Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g Database - 'SUBSCRIPTION_NAME' SQL Injection (2)
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'login.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SQLiteManager 1.2 - Local File Inclusion
Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot d
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection
SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g DBMS_METADATA.GET_DDL - SQL Injection (2)
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g ACTIVATE_SUBSCRIPTION - SQL Injection (2)
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SQLiteManager 1.2 - 'main.php' Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'register.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3 allow remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g KUPV$FT.ATTACH_JOB - SQL Injection (2)
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audins Audiens 3.3 - 'unistall.php' Authentication Bypass
Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tyger Bug Tracking System 1.1.3 - 'ViewBugs.php?s' SQL Injection
SQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolarPay - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Core 2.1.1 - 'post.php' Cross-Site Scripting
Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10g - KUPW$WORKER.MAIN SQL Injection (2)
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - Explorer '.WMF' File Handling Denial of Service
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (cr
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/flatevents.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PhotoStand 1.2 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Active Calendar 1.2 - '/data/js.php?css' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.