Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Datenbank Module For phpBB - 'Remote mod.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Remote - 'mod.php' SQL Injection
SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000 - Internet Protocol Validation Remote Code Execution (2)
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Libsafe 2.0 - Multi-threaded Process Race Condition Security Bypass
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass li
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SqWebMail 3.x/4.0 - HTTP Response Splitting
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter fo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSA Security RSA Authentication Agent For Web 5.2 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in IISWebAgentIF.dll in the RSA Authentication Agent for Web 5.2 allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
All4WWW-HomePageCreator 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yager 5.24 - Multiple Denial of Service Vulnerabilities
Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed da
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OneWorldStore - 'OWContactUs.asp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OneWorldStore - 'OWProductDetail.asp' SQL Injection
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OneWorldStore - 'OWListProduct.asp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in OneWorldStore allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OneWorldStore - 'OWListProduct.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'HTA' Script Execution (MS05-016)
The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sumus 0.2.2 - HTTPd Remote Buffer Overflow
Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SPHPBlog 0.4 - 'search.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OneWorldStore - 'OWAddItem.asp' SQL Injection
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yager 5.24 - Multiple Denial of Service Vulnerabilities
Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 1.x/2.0.x - Knowledge Base Module 'KB.php' SQL Injection
SQL injection vulnerability in kb.php in the Knowledge Base module for phpBB allows remote attackers to obtain sensitive
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere 5.0/5.1/6.0 - Application Server Web Server Root JSP Source Code Disclosure
IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Database 10.1 - MDSYS.MD2.SDO_CODE_SIZE Buffer Overflow
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
gld 1.4 - Postfix Greylisting Daemon Remote Format String
Format string vulnerability in the ErrorLog function in cnf.c in Greylisting daemon (GLD) 1.3 and 1.4 allows remote atta
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeFtp 6.x - Local Password Disclosure
Lightspeed DeluxeFTP 6.01 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - DHTML Object Handling (MS05-020)
Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Salim Gasmi GLD (Greylisting Daemon) 1.x - Postfix Greylisting Daemon Buffer Overflow
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is l
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pinnacle Cart - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)
Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execut
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Comersus Cart 4.0/5.0 - 'Comersus_Search_Item.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in comersus_searchItem.asp in Comersus 3.90 to 4.51 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun JavaMail 1.3.2 - 'MimeBodyPart.getFileName' Directory Traversal
Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to wr
23RISCO
abrir ↗Metasploit400
GLD (Greylisting Daemon) Postfix Buffer Overflow
Multiple buffer overflows in the HandleChild function in server.c in Greylisting daemon (GLD) 1.3 and 1.4, when GLD is l
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.