Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.526exploits catalogados
34.478CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.534GitHub PoC 13.654VulnCheck XDB 8.213Nuclei 4.218Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password fo
23RISCO
abrir ↗Exploit-DB
Ammyy Admin 3.2 - Authentication Bypass
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assiste
23RISCO
abrir ↗Exploit-DB
Joomla! Component JV Comment 3.0.2 - 'id' SQL Injection
SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authentic
23RISCO
abrir ↗Exploit-DB
Joomla! Component Komento 1.7.2 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the StackIdeas Komento (com_komento) component before 1.7.3 for J
23RISCO
abrir ↗Exploit-DB
MW6 Technologies Aztec - ActiveX 'Data' Buffer Overflow (PoC)
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Daum Game 1.1.0.5 - ActiveX 'IconCreate Method' Remote Stack Buffer Overflow
Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Data Protector - Backup Client Service Directory Traversal (Metasploit)
Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Skybluecanvas CMS 1.1 r248-03 - Remote Command Execution
The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248
50RISCO
abrir ↗Exploit-DB
MW6 Technologies MaxiCode - ActiveX 'Data' Buffer Overflow (PoC)
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.
41RISCO
abrir ↗Exploit-DB
MW6 Technologies Datamatrix - ActiveX 'Data' Buffer Overflow
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls versions before 4.0 are vulnerable to arbitrary code via crafted HTML document.
41RISCO
abrir ↗Exploit-DB
iTechClassifieds 3.03.057 - SQL Injection
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB
Simple E-document 1.31 - Authentication Bypass
SQL injection vulnerability in login.php in Simple e-document 1.31 allows remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB
iTechClassifieds 3.03.057 - SQL Injection
SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GoToMeeting for Android - Multiple Local Information Disclosure Vulnerabilities
The Citrix GoToMeeting application 5.0.799.1238 for Android logs HTTP requests containing sensitive information, which a
23RISCO
abrir ↗Exploit-DB
Teracom Modem T2-B-Gawv1.4U10Y-BI - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MuPDF 1.3 - 'xps_parse_color()' Stack Buffer Overflow
Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote a
28RISCO
abrir ↗Exploit-DB
ASUS RT-N56U - Remote Buffer Overflow (ROP)
Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Sexy polling 1.0.8 - 'answer_id' SQL Injection
SQL injection vulnerability in vote.php in the 2Glux Sexy Polling (com_sexypolling) component before 1.0.9 for Joomla! a
23RISCO
abrir ↗Exploit-DB
Collabtive 1.1 - 'managetimetracker.php' SQL Injection
SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execu
23RISCO
abrir ↗Exploit-DB
PHPJabbers Appointment Scheduler 2.0 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Atmail Webmail Server - Email Body HTML Injection
Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB
Horizon QCMS 4.0 - Multiple Vulnerabilities
SQL injection vulnerability in download.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows rem
23RISCO
abrir ↗Exploit-DB
Conceptronic Wireless Pan & Tilt Network Camera - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21
28RISCO
abrir ↗Exploit-DB
SoapUI 4.6.3 - Remote Code Execution
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a c
23RISCO
abrir ↗Exploit-DB
PHPJabbers Event Booking Calendar 2.0 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attacke
23RISCO
abrir ↗Exploit-DB
Burden 1.8 - Authentication Bypass
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Supply Chain Products Suite - Remote Security
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.