Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Metasploit200
Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a den
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySpeach 2.1b - 'up.php' Remote File Inclusion
PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SMF 1.1 - 'index.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote aut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.HPJ' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ArsDigita Community System 3.4.x - Directory Traversal
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Educat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP JetDirect FTP Print Server - 'RERT' Denial of Service
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Download and Execute (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBloggie 2.1.5 - 'login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
SQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.3.6 and earlier in the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Help Workshop 4.03.0002 - '.cnt' Local Buffer Overflow
Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitr
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'tell_friend.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Squid Proxy 2.5/2.6 - FTP URI Remote Denial of Service
squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via craft
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'user_detail.php?u' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'register.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'power_search.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'new.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'upgrade.php?gateway' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'send_pwd.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'suggest_category.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'login.php?Error_msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DT_Guestbook 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enab
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Indexu 5.0/5.3 - 'mailing_list.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle January 2007 Security Update - Multiple Vulnerabilities
Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown i
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.