Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.013exploits catalogados
41.057CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentespopularesrisco
89.013 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities
Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execut
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DieselScripts Diesel Paid Mail - 'Getad.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache < 1.3.37/2.0.59/2.2.3 mod_rewrite - Remote Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10.x - 'editit.html?File' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DieselScripts Smart Traffic - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel 10.x - 'showfile.html?File' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DieselScripts DieselPay - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attrib
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion
PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, whe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - CanonicalizePathName() Remote (MS06-040)
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tutti Nova 1.6 - 'TNLIB_DIR' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 1.0.x/2.2 - Icon_Topic SQL Injection
SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Identity Manager - Arbitrary Command Execution
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Artlinks 1.0b4 - Remote File Inclusion
PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sonium Enterprise Adressbook 0.2 - 'folder' Include
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Mosets Tree 1.0 - Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree compo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'TSUserEX.dll' ActiveX Control Memory Corruption
The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibl
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CubeCart 3.0.11 - 'oid' Blind SQL Injection
Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - GAS Buffer Overflow
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundati
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL 4/5 - SUID Routine Miscalculation Arbitrary DML Statement Execution
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component Reporter 1.0 - 'Reporter.sql.php' Remote File Inclusion
PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.3/5.1.4 - 'sscanf' Local Buffer Overflow
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fusionphp Fusion News 3.7 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lizge 20 - 'index.php' Multiple Remote File Inclusions
Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'IMSKDIC.dll' Denial of Service
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.x - XML Handler Race Condition Memory Corruption
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WEBInsta CMS 0.3.1 - 'users.php' Remote File Inclusion
PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers t
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.