Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Microsoft SMB Driver - Local Denial of Service
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Andy Mack 35mm Slide Gallery 6.0 - 'popup.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Metasploit400
MS06-025 Microsoft RRAS Service RASMAN Registry Overflow
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DoubleSpeak 0.1 - Multiple Remote File Inclusions
PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to
23RISCO
abrir ↗Metasploit200
MS06-025 Microsoft RRAS Service Overflow
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serve
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft DXImageTransform.Microsoft.Light - ActiveX Control Remote Code Execution
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execu
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Exchange Server 2000/2003 - Outlook Web Access Script Injection
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Acc
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution
The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CEScripts (Multiple Scripts) - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SixCMS 6.0 - 'list.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Five Star Review Script - 'index2.php?sort' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Metasploit200
Cesar FTP 0.99g MKD Command Buffer Overflow
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applicat
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Five Star Review Script - 'report.php?item_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iFoto 0.20 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SixCMS 6.0 - 'detail.php' Directory Traversal
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinSCP 3.8.1 - URI Handler Arbitrary File Access
Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CesarFTP 0.99g - 'MKD' Remote Buffer Overflow
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applicat
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FlexWATCH Network Camera - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Content-Builder (CMS) 0.7.5 - Multiple Include Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Baby Katie Media VSReal and VScal 1.0 - 'index.php?lid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice 7.5 - 'edtalbum.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash (PoC)
Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice 7.5 - 'album.asp?cat' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Baby Katie Media VSReal and VScal 1.0 - 'myslideshow.php?title' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KAPhotoservice 7.5 - 'albums.asp?albumid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link DWL Series Access-Point 2.10na - Config Disclosure
The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CMS-Bandits 2.5 - 'spaw_root' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeType - '.TTF' File Remote Denial of Service
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file tha
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeType - '.TTF' File Remote Buffer Overflow
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file wi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiraksGalerie 2.62 - 'galsecurity.lib.php?listconfigfile[0]' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.