Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.025exploits catalogados
41.063CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.613Metasploit 3.540✓ só verificadosrecentespopularesrisco
89.025 exploits
Exploit-DB✓ VexDay Proof
VWar 1.x - 'war.php' Multiple SQL Injections
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.8 - 'CF_CHARSET_PATH' Local Buffer Overflow (2)
Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Quickie - 'Quick_Path' Remote File Inclusion
PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers t
23RISCO
abrir ↗Metasploit400
Apple iOS MobileMail LibTIFF Buffer Overflow
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir ↗Metasploit400
Apple iOS MobileSafari LibTIFF Buffer Overflow
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Guestbook 3.5 - 'GB_PATH' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.3.x - 'preview_email.cgi?file' Arbitrary File Access
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.0
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WoW Roster 1.5 - 'hsList.php?subdir' Remote File Inclusion
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TSEP 0.942 - 'copyright.php' Remote File Inclusion
PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remot
23RISCO
abrir ↗Metasploit300
McAfee Subscription Manager Stack Buffer Overflow
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ajax Chat 0.1 - 'operator_chattranscript.php?chatid' Traversal Arbitrary File Access
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'admin.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BomberClone 0.11 - Multiple Vulnerabilities
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion
PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Mosk
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VMware ESX 2.x - Multiple Information Disclosure Vulnerabilities
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'members.php?cfg_root' Remote File Inclusion
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
myEvent 1.2/1.3 - 'myevent.php' Remote File Inclusion
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitra
23RISCO
abrir ↗Metasploit200
Easy File Sharing FTP Server 2.0 PASS Overflow
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Protection 1.10 - 'Protect.php' SQL Injection
SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Deleted Frame Object Denial of Service
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Scripts X-Poll 1.10 - 'top.php' SQL Injection
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary
23RISCO
abrir ↗Metasploit500
Apache Module mod_rewrite LDAP Protocol Buffer Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke - 'INP modules.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-trackback.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-feed.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-comments-post.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.5.0.4 - JavaScript Navigator Object Code Execution
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chang
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.