Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_edit.asp?SQL' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - 'export.asp?SQL' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE]_list.asp?searchFor' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - Database Direct Request Information Disclosure
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLineSoft ASPRunner 1.0/2.x - '[TABLE-NAME]_search.asp?Typeen' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows SMS 2.0 - Denial of Service
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Denial of Service
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a ta
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EasyWeb 1.0 FileManager Module - Directory Traversal
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache - Arbitrary Long HTTP Headers (Denial of Service)
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memor
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lexmark Multiple HTTP Servers - Denial of Service
The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flash FTP Server - Directory Traversal
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.4 - SWAT Authorisation Buffer Overflow
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Conceptronic CADSLR1 Router - Denial of Service
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Serena TeamTrack 6.1.1 - Remote Authentication Bypass
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and databas
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Leigh Business Enterprises Web HelpDesk 4.0 - SQL Injection
SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Layton Technology HelpBox 3.0.1 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport DNA HelpDesk 1.0 Problist Script - SQL Injection
SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Polar Helpdesk 3.0 - Cookie Based Authentication Bypass
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cooki
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SCO Multi-channel Memorandum Distribution Facility - Multiple Vulnerabilities
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
British National Corpus SARA - Remote Buffer Overflow
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SCI Photo Chat 3.4.9 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Medal of Honor - Remote Buffer Overflow (PoC)
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spe
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - Utility Manager All-in-One (MS04-019)
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which all
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Outblaze Webmail - HTML Injection
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CuteNews 1.3 - Comment HTML Injection
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in Cu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, al
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit)
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion Database Backup - Information Disclosure
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups direct
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.