Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.526exploits catalogados
34.478CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
VCDGear 3.50 - '.cue' Local Stack Buffer Overflow
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via
23RISCO
abrir ↗Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharact
23RISCO
abrir ↗Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo befor
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GE Proficy CIMPLICITY - 'gefebt.exe' Remote Code Execution (Metasploit)
GE Proficy HMI/SCADA Path Traversal
78RISCO
abrir ↗Exploit-DB
WordPress Plugin VideoWhisper 4.27.3 - Multiple Vulnerabilities
The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Li
23RISCO
abrir ↗Exploit-DB
Webuzo 2.1.3 - Multiple Vulnerabilities
The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attem
23RISCO
abrir ↗Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remot
23RISCO
abrir ↗Exploit-DB
GDL 4.2 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit)
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager - Remote Command Execution (Metasploit)
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RISCO
abrir ↗Exploit-DB
Piwigo 2.6.1 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
POSH 3.1.x - 'addtoapplication.php' SQL Injection
SQL injection vulnerability in portal/addtoapplication.php in POSH (aka Posh portal or Portaneo) 3.0 before 3.3.0 allows
23RISCO
abrir ↗Exploit-DB
Technicolor TC7200 - Credentials Disclosure
Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sendy 1.1.8.4 - SQL Injection
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i
23RISCO
abrir ↗Exploit-DB
Python - 'socket.recvfrom_into()' Remote Buffer Overflow
Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.74
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.40
50RISCO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eshtery CMS - 'FileManager.aspx' Local File Disclosure
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write
Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2.1.1 allows remote auth
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free p
23RISCO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ultra Mini HTTPd 1.21 - 'POST' Remote Stack Buffer Overflow (2)
Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resour
50RISCO
abrir ↗Exploit-DB
ILIAS 4.4.1 - Multiple Vulnerabilities
ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .
23RISCO
abrir ↗Exploit-DB
Stark CRM 1.0 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB
Stark CRM 1.0 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijack the authent
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PCMan FTP Server 2.07 - Remote Buffer Overflow
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dassault Systemes Catia - Remote Stack Buffer Overflow
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.