Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'news.php?&link_parameters' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CedStat 1.31 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Desktop - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inje
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.2 - 'preview.php?PHP_script_path' Remote File Inclusion
PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Local File Access
Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attacke
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure
nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 8.0 Final - 'INSERT' SQL Injection
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" blo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Design4Online - 'Userpages2 Page.asp' SQL Injection
SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 8.0 Final - 'INSERT' Blind SQL Injection (MySQL)
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" blo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 2.0.0.1 - 'location.hostname' Cross-Domain
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remo
28RISCO
abrir ↗Metasploit600
JBoss JMX Console Deployer Upload and Execute
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Metasploit600
JBoss JMX Console Deployer Upload and Execute
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which
60RISCO
abrir ↗Metasploit600
JBoss DeploymentFileRepository WAR Deployment (via JMXInvokerServlet)
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which
60RISCO
abrir ↗Metasploit400
Trend Micro ServerProtect 5.58 Buffer Overflow
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance F
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AbleDesign MyCalendar 2.20.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 - ImageIO GIF Image Integer Overflow
Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a d
28RISCO
abrir ↗Metasploit400
Snort 2 DCE/RPC Preprocessor Buffer Overflow
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.0/1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (2)
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 7.0.2 - XML Parsing Remote Denial of Service
Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - spyce/examples/automaton.spy Direct Request Error Message Information Disclosure
Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - '/docs/examples/redirect.spy' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'spyce/examples/request.spy?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'docs/examples/handlervalidate.spy?x' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
News File Grabber 4.1.0.1 - Subject Line Stack Buffer Overflow (2)
Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Powerschool 4.3.6/5.1.2 - JavaScript File Request Information Disclosure
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Spyce 2.1.3 - 'spyce/examples/getpost.spy?Name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.