Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
80.557exploits catalogados
37.313CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.478Referência 23.776GitHub PoC 15.367VulnCheck XDB 9.019Nuclei 4.415Metasploit 3.502✓ só verificadosrecentespopularesrisco
24.478 exploits
Exploit-DB
WebTitan 4.01 (Build 68) - Multiple Vulnerabilities
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foreman Smart-Proxy - Remote Command Injection
The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via
23RISCO
abrir ↗Exploit-DB
IPSwitch IMail Server WEB client 12.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4,
23RISCO
abrir ↗Exploit-DB
WordPress Plugin Participants Database 1.5.4.8 - SQL Injection
SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allo
23RISCO
abrir ↗Exploit-DB
dbus-glib pam_fprintd - Local Privilege Escalation
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.0-23/3.5.0-23 (Ubuntu 12.04/12.04.1/12.04.2 x64) - 'perf_swevent_init' Local Privilege Escalation (3)
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Huawei E303 Router - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in api/sms/send-sms in the Web UI 11.010.06.01.858 on Huawei E303 modems
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ElasticSearch Dynamic Script - Arbitrary Java Execution (Metasploit)
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AuraCMS 3.0 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Tera Charts (tera-charts) - '/charts/zoomabletreemap.php?fn' Directory Traversal
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attacker
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AuraCMS 3.0 - Multiple Vulnerabilities
Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark CAPWAP Dissector - Denial of Service (Metasploit)
The dissect_capwap_data function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin ENL NewsLetter - '/wp-admin/admin.php' SQL Injection
SQL injection vulnerability in the ENL Newsletter (enl-newsletter) plugin 1.0.1 for WordPress allows remote authenticate
23RISCO
abrir ↗Exploit-DB
Sharetronix 3.3 - Multiple Vulnerabilities
SQL injection vulnerability in Sharetronix before 3.4 allows remote authenticated users to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin BookX 1.7 - 'bookx_export.php' Local File Inclusion
Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
webEdition CMS - 'we_fs.php' SQL Injection
Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and
23RISCO
abrir ↗Exploit-DB
Sharetronix 3.3 - Multiple Vulnerabilities
Cross-site request forgery (CSRF) vulnerability in Sharetronix before 3.4 allows remote attackers to hijack the authenti
23RISCO
abrir ↗Exploit-DB
TORQUE Resource Manager 2.5.x < 2.5.13 - Stack Buffer Overflow Stub
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Reso
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin HDW Player - '/wp-admin/admin.php' SQL Injection
SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 fo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP Rss Poster - '/wp-admin/admin.php' SQL Injection
SQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.3.5 - '/drivers/media/media-device.c' Local Information Disclosure
The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Tera Charts (tera-charts) - '/charts/treemap.php?fn' Directory Traversal
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attacker
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Castor Library - XML External Entity Information Disclosure
The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy File Sharing FTP Server 3.5 - Remote Stack Buffer Overflow
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Videos Tube 1.0 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB
ZYXEL P-660HW-T1 3 Wireless Router - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in the Zyxel P-660HW-T1 (v3) wireless router allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Workspace Streaming - Arbitrary File Upload (Metasploit)
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functional
50RISCO
abrir ↗Exploit-DB
Linux Kernel 3.14-rc1 < 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver a
68RISCO
abrir ↗Exploit-DB✓ VexDay Proof
User Cake - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in user_settings.php in Usercake 2.0.2 and earlier allow remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dpkg Source Package - Index: pseudo-header Processing Multiple Local Directory Traversals
Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files out
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.