Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.445exploits catalogados
34.432CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB
GQ File Manager 0.2.5 - Multiple Vulnerabilities
SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB
Codiad 2.4.3 - Multiple Vulnerabilities
Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read
23RISCO
abrir ↗Exploit-DB
Ettercap 0.8.0 < 0.8.1 - Multiple Denial of Service Vulnerabilities
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 a
28RISCO
abrir ↗Exploit-DB
Codiad 2.4.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to
23RISCO
abrir ↗Exploit-DB
MiniBB 3.1 - Blind SQL Injection
bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to c
23RISCO
abrir ↗Exploit-DB
Cacti Superlinks Plugin 1.4-2 - SQL Injection / Local File Inclusion
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the
23RISCO
abrir ↗Exploit-DB
ProjectSend r561 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) r561 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbi
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GIT 1.8.5.6/1.9.5/2.0.5/2.1.4/2.2.1 & Mercurial < 3.2.3 - Multiple Vulnerabilities (Metasploit)
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderb
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Malwarebytes Anti-Malware < 2.0.3 / Anti-Exploit < 1.03.1.1220 - Update Code Execution (Metasploit)
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)
43RISCO
abrir ↗Exploit-DB
CMS Papoo 6.0.0 Rev. 4701 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB
phpMyAdmin 4.0.x/4.1.x/4.2.x - Denial of Service
libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows re
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tuleap - PHP Unserialize Code Execution (Metasploit)
project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated
43RISCO
abrir ↗Exploit-DB
WordPress Plugin WP Symposium 14.11 - Arbitrary File Upload
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote
50RISCO
abrir ↗Exploit-DB
GLPI 0.85 - Blind SQL Injection
SQL injection vulnerability in ajax/getDropdownValue.php in GLPI before 0.85.1 allows remote authenticated users to exec
23RISCO
abrir ↗Exploit-DB
IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database
23RISCO
abrir ↗Exploit-DB
IBM Tivoli Service Automation Manager 7.2.4 - Remote Code Execution
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 4.1.2(7) - Multiple SQL Injections
Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execut
23RISCO
abrir ↗Exploit-DB
Humhub 0.10.0-rc.1 - SQL Injection
SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListControlle
23RISCO
abrir ↗Exploit-DB
WordPress Plugin Symposium 14.10 - SQL Injection
SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remo
23RISCO
abrir ↗Exploit-DB
Advantech AdamView 4.30.003 - '.gni' Local Buffer Overflow (SEH)
Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kerberos - Privilege Escalation (MS14-068)
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008
100RISCO
abrir ↗Exploit-DB
PBBoard CMS 3.0.1 - SQL Injection
SQL injection vulnerability in the CheckEmail function in includes/functions.class.php in PBBoard 3.0.1 before 20141128
23RISCO
abrir ↗Exploit-DB
Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t
23RISCO
abrir ↗Exploit-DB
Advertise With Pleasure! (AWP) 6.6 - SQL Injection
SQL injection vulnerability in Guruperl.net Advertise With Pleasure! Professional (aka AWP PRO) 6.6 and earlier allows r
23RISCO
abrir ↗Exploit-DB
Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities
Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metac
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.