Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Solaris 9/10 - 'ld.so' Local Privilege Escalation (1)
The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPNuke 0.80 - 'forgot_password.asp?email' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Inframail Advantage Server Edition 6.0 < 6.37 - 'SMTP' Buffer Overflow
Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPNuke 0.80 - 'Language_Select.asp' HTTP Response Splitting
HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web conte
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Inframail Advantage Server Edition 6.0 < 6.37 - 'FTP' Buffer Overflow
Buffer overflow in Inframail Advantage Server Edition 6.0 through 6.7 allows remote attackers to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPNuke 0.80 - 'comment_post.asp' SQL Injection
SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPNuke 0.80 - 'article.asp' SQL Injection
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASPNuke 0.80 - 'register.asp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IA eMailServer Corporate Edition 5.2.2 - Denial of Service
Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cau
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 6.00.105 - Accessible Database Backups Download
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficien
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads < 6.5.2 Beta - 'mailthread.php' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'addfav.php?main' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'modifypost.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities
traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIV_NET_RAWACCESS privile
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'viewmessage.php?message' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows rem
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'download.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'notifymod.php?Number' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'grabnext.php?posted' SQL Injection
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 5.5.1/6.x - 'calendar.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate c
45RISCO
abrir ↗Metasploit500
Veritas Backup Exec Windows Remote Agent Overflow
Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.3
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'productEdit.asp?iCat' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'detail.asp?iSub' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'messages.asp?iMsg' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'post.asp?iFor' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUamazon Pro 3.0/3.1 - 'review.asp?iPro' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection
SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUware DUforum 3.0/3.1 - 'forums.asp?iFor' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to exe
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.