Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
DMXReady Site Engine Manager 1.0 - 'index.asp' SQL Injection
SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Car Site Manager - '/csm/asp/listings.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetVIOS 2.0 - 'page.asp' SQL Injection
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteXpress E-Commerce System - 'Dept.asp' SQL Injection
SQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plesk 7.5/8.0 - 'get_password.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MGinternet Property Site Manager - 'admin_login.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Car Site Manager - '/csm/asp/detail.asp?p' SQL Injection
Multiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plesk 7.5/8.0 - 'login_up.php3' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject a
23RISCO
abrir ↗Metasploit400
MS06-066 Microsoft Services nwapi32.dll Module Exploit
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 al
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MGinternet Property Site Manager - 'listings.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary S
23RISCO
abrir ↗Metasploit400
MS06-066 Microsoft Services nwwks.dll Module Exploit
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 al
60RISCO
abrir ↗Metasploit300
MS06-067 Microsoft Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) fo
60RISCO
abrir ↗Metasploit0
MS06-070 Microsoft Workstation Service NetpManageIPCConnect Overflow
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Wi
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10 - 'newuser.html' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10 - 'seldir.html?dir' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere 6.0 - 'Faultactor' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSph
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'login.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Property Pro 1.0 - 'vir_Login.asp' Remote Authentication Bypass
SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation
Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'browsesubcat.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'added_to_cart.asp?ProductID' SQL Injection
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)
Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC30
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'browse_group.asp?groupid' SQL Injection
Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quick.Cart 2.0 - '/actions_client/gallery.php' Local File Inclusion
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'sendpassword.asp?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
INFINICART - 'search.asp?search' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_SHOW_RESELLER' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.28/1.29 - 'CMD_EMAIL_FORWARDER_MODIFY' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPdebug 1.1 - 'Debug_test.php' Remote File Inclusion
PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers t
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.