Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
CyberShop Ultimate E-Commerce - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fcron 3.0 - Convert-FCronTab Local Buffer Overflow
The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SZUserMgnt 1.4 - 'Username' SQL Injection
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPIP 1.8/1.9 - 'index.php3' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftiaCom wMailServer 1.0 - SMTP Remote Buffer Overflow (Metasploit)
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large T
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection
SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Farsinews 2.1 - 'Loginout.php' Remote File Inclusion
PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.1 - Remote Buffer Overflow (cpp)
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp 5.12 - '.pls' Remote Buffer Overflow (Metasploit)
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cerberus Helpdesk 2.7 - 'Clients.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection
SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
sPaiz-Nuke - 'modules.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ashwebstudio Ashnews 0.83 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PmWiki 2.1 - Multiple Input Validation Vulnerabilities
pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0/1.5 XBL - MOZ-BINDING Property Cross-Domain Scripting
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Daffodil CRM 1.5 - 'Userlogin.asp' SQL Injection
SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 6.3 - 'showflat.php' SQL Injection
SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp 5.12 - '.pls' Remote Buffer Overflow (1)
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with
60RISCO
abrir ↗Metasploit500
Winamp Playlist UNC Path Computer Name Overflow
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CommuniGate Pro 5.0.6 - Server LDAP Denial of Service
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execu
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
My Little Homepage Products - BBCode Link Tag Script Injection
Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AndoNET Blog 2004.9.2 - 'Comentarios.php' SQL Injection
SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Database Server 9i/10g - 'XML' Local Buffer Overflow
Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Exiv2 - Corrupted EXIF Data Denial of Service
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Phpclanwebsite 1.23.1 - SQL Injection
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CheesyBlog 1.0 - Multiple HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.1 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via lon
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.