Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
FCKEditor 2.0 < 2.2 - 'FileManager connector.php' Arbitrary File Upload
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen en
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion
Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PwsPHP 1.2.3 - SQL Injection
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection
SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CPAINT 1.3/2.0.2 - 'TYPE.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vwdev - 'index.php' SQL Injection
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun ONE Directory Server 5.2 - Remote Denial of Service
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QNX Neutrino 6.2.1 - 'phfont' Race Condition Privilege Escalation
Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipul
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QNX RTOS 6.3.0 - Insecure 'rc.local' Permissions System Crash / Privilege Escalation
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8.2 - 'Spip_RSS.php' Remote Command Execution
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CPGNuke Dragonfly 9.0.6.1 - Remote Command Execution
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.5 (OSX) - 'location.QueryInterface()' Code Execution (Metasploit)
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attac
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8.2g - Remote Command Execution
SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7.0 Beta 2 - 'urlmon.dll' Denial of Service
urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of servi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.5 (Linux) - 'location.QueryInterface()' Code Execution (Metasploit)
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attac
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GA's Forum Light - 'Archive.asp' SQL Injection
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QNX 6.2/6.3 - Multiple Privilege Escalation / Denial of Service Vulnerabilities
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary
50RISCO
abrir ↗Metasploit400
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included
60RISCO
abrir ↗Metasploit400
HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyQuiz 1.01 - 'PATH_INFO' Arbitrary Command Execution
myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sony/Ericsson Bluetooth - Reset Display Denial of Service
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Clever Copy 3.0 - Admin Auth Details / SQL Injection
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Access Manager Plugin - Directory Traversal
Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.4 - Remote File Inclusion
PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftMaker Shop - Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Arescom NetDSL-1000 - 'TelnetD' Remote Denial of Service
The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of conne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attacke
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.