Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office Outlook Recipient Control - 'ole32.dll' Denial of Service
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RateMe 1.3.2 - 'main.inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grsecurity Kernel PaX - Local Privilege Escalation
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspe
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Contra Haber Sistemi 1.0 - 'Haber.asp' SQL Injection
SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Omniture SiteCatalyst - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor Firewall - HIPS Process Spoofing
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows l
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.4.3 - 'KBIND' Remote Buffer Overflow
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDAP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cau
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 9/10 - '.mid' Denial of Service
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 6.4/10.0 - MID Malformed Header Chunk Denial of Service
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moodle 1.5/1.6 - '/mod/forum/discuss.php?navtail' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GenesisTrader 1.0 - 'form.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive infor
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperAccess 8.4 - Multiple Remote Command Execution Vulnerabilities
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.0a - 'mod_ctrls' 'support' Local Buffer Overflow (PoC)
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word Document - Malformed Pointer (PoC)
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to ex
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word Document - Malformed Pointer (PoC)
Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (applica
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitra
23RISCO
abrir ↗Metasploit500
MailEnable IMAPD (2.34/2.35) Login Request Buffer Overflow
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Pro
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FileZilla FTP Server 0.9.21 - 'LIST/NLST' Denial of Service
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to
23RISCO
abrir ↗Metasploit300
FileZilla FTP Server Malformed PORT Denial of Service
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos AntiVirus - '.CHM' File Heap Overflow (PoC)
Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.1
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)
Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.1
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HR Assist 1.05 - 'vdateUsr.asp' Remote Authentication Bypass
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProNews 1.5 - 'lire-avis.php?aa' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProNews 1.5 - '/admin/change.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.