Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
eNdonesia 8.3 - Search Form Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free Web Chat Initial Release - UserManager.java Null Pointer Denial of Service
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (unca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.26 - File Offset Pointer Handling Memory Disclosure
Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portio
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenFTPd 0.30.1 - message system Remote Shell
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free Web Chat Initial Release - Connection Saturation Denial of Service
Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'mshtml.dll' Remote Null Pointer Crash
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i - Multiple Vulnerabilities
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoX - '.wav' Local Buffer Overflow
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acme thttpd 2.0.7 - Directory Traversal
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenFTPd 0.30.2 - Remote Overflow
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 3.2.2/4.1 - LDACGI Directory Traversal
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Citadel/UX - Remote Denial of Service (PoC)
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache - Arbitrary Long HTTP Headers Denial of Service
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Webcam Corp Webcam Watchdog 4.0.1 - 'sresult.exe' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla 1.x / Netscape 7.0/7.1 - SOAP Integer Overflow
Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and po
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoX - Local Buffer Overflow
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, al
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PowerPortal 1.1/1.3 - Private Message HTML Injection
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle9i Database - Default Library Directory Privilege Escalation
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fusionphp Fusion News 3.3/3.6 - Administrator Command Execution
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jaws 0.2/0.3/0.4 - 'ControlPanel.php' SQL Injection
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Verylost LostBook 1.1 - Message Entry HTML Injection
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - Panther Internet Connect Privilege Escalation
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDia
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AntiBoard 0.6/0.7 - 'antiboard.php' Multiple SQL Injections
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Phorum 5.0.7 - Search Script Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 7.53 - Location Replace URI Obfuscation
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been l
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Arbitrary File Access
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RiSearch 0.99 /RiSearch Pro 3.2.6 - show.pl Open Proxy Relay
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.