Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Vt-Forum Lite 1.3 - 'vf_newtopic.asp' IFRAME Element Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Inside Systems Mail 2.0 - 'error.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.x - 'Spellwin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vt-Forum Lite 1.3 - 'vf_info.asp?StrMes' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - 'Filename' Remote Buffer Overflow
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-revista 1.1.2 - 'adodb' Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.3.6 - 'result' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUdownload 1.0/1.1 - 'detail.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPNews 1.3 - 'Link_Temp.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUClassmate 1.x - 'ICity' SQL Injection
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Community Blog Mod 1.2.4 - SQL Injection
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD 3.1 - 'FTPd / Tnftpd' Port Remote Buffer Overflow
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ContentServ 4.x - '/admin/FileServer.php' File Disclosure
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.3.6 - 'Show' SQL Injection
SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload
Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LDU 8.x - 'polls.php' SQL Injection
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acer LunchApp.APlunch - ActiveX Control Command Execution
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Remote Overflow
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD - 'FTPd / Tnftpd' Remote Stack Overflow (PoC)
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpGraphy 0.9.12 - Privilege Escalation / Commands Execution
phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
b2evolution 1.8.5 < 1.9b - 'import-mt.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - 'Shared_Region_Make_Private_Np' Kernel Function Local Memory Corruption
Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows loca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
P-News 2.0 - 'user.txt' Remote Password Disclosure
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Overflow (PoC)
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClickContact - 'default.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitr
23RISCO
abrir ↗Metasploit200
Allied Telesyn TFTP Server 1.9 Long Filename Overflow
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.