Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
MyPHPim - 'calendar.php3?cal_id' SQL Injection
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CounterPath eyeBeam 1.1 build 3010n - SIP Header Data Remote Buffer Overflow (1)
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device cr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craft
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyPHPim - Login Page pass Field SQL Injection
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hummingbird Collaboration - Crafted URL File Property Obscuration Download
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Orjinweb - 'index.php' Remote File Inclusion
PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hummingbird Collaboration - Application Cookie Internal Network Information Disclosure
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cray UNICOS /usr/bin/script - Command Line Argument Local Overflow
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xmame 0.102 - '-lang' Local Buffer Overflow
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow loc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebWiz Forums - 'Search_form.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cray UNICOS /etc/nu - '-c' Option Filename Processing Local Overflow
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 7.7 EV Search Module - SQL Injection
SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AppServ Open Project 2.4.5 - Remote File Inclusion
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
427BB 2.2 - Authentication Bypass
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Venom Board - 'Post.php3' Multiple SQL Injections
SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke News Submission Story - Text Field Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Graphics Rendering Engine Multiple Memory Corruption Vulnerabilities
Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of servic
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel 95 < 2004 - Malformed Graphic File Code Execution
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xoops Pool Module - IMG Tag HTML Injection
Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sudo 1.6.x - Environment Variable Handling Security Bypass (2)
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic News Plus 1.0.3 - Admin Pass Change
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
427BB 2.2 - 'showthread.php' SQL Injection
SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sudo 1.6.x - Environment Variable Handling Security Bypass (1)
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dual DHCP DNS Server 1.0 - DHCP Options Remote Buffer Overflow
Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCoat WinProxy 6.0 R1c - 'Host' Remote Stack Overflow (SEH)
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueCoat WinProxy 6.0 R1c - GET Denial of Service
The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OnePlug CMS - '/services/details.asp?Service_ID' SQL Injection
Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foro Domus 2.10 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TinyPHPForum 3.6 - Multiple Directory Traversal Vulnerabilities
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web roo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OnePlug CMS - '/press/details.asp?Press_Release_ID' SQL Injection
Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.