Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote a
68RISCO
abrir ↗Exploit-DB
WordPress Plugin NOSpamPTI - Blind SQL Injection
SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CCaret Use-After-Free (MS13-069) (Metasploit)
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Lazy SEO 1.1.9 - Arbitrary File Upload
Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers
23RISCO
abrir ↗Exploit-DB
vTiger CRM 5.4.0 - 'index.php?onlyforuser' SQL Injection
SQL injection vulnerability in CalendarCommon.php in vTiger CRM 5.4.0 and possibly earlier allows remote authenticated u
23RISCO
abrir ↗Exploit-DB
WordPress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload
Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 r
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP ProCurve Manager SNAC - UpdateCertificatesServlet Arbitrary File Upload (Metasploit)
UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0,
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vino VNC Server 3.7.3 - Persistent Denial of Service
The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance - 'sblistpack' Arbitrary Command Execution (Metasploit)
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
60RISCO
abrir ↗Exploit-DB
Oracle Java - 'ShortComponentRaster.verify()' Memory Corruption
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 U
28RISCO
abrir ↗Exploit-DB
PCMan FTP Server 2.07 - 'STOR' Remote Stack Overflow (Metasploit)
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sophos Web Protection Appliance - clear_keys.pl Privilege Escalation (Metasploit)
The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP ProCurve Manager - SNAC UpdateDomainControllerServlet Arbitrary File Upload (Metasploit)
UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 9.0.1 - Same Origin Policy Security Bypass
Mozilla Firefox before 24.0 on Android allows attackers to bypass the Same Origin Policy, and consequently conduct cross
23RISCO
abrir ↗Exploit-DB
Mitsubishi MC-WorkX 8.02 - ActiveX Control 'IcoLaunch' File Execution
An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zimplit CMS 3.0 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to
23RISCO
abrir ↗Exploit-DB
D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DSL-2740B Gateway with firmware EU_1.00 allow remot
23RISCO
abrir ↗Exploit-DB
Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling (MS13-067)
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AjaXplorer 1.0 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP SiteScope (Windows) - Remote Code Execution (Metasploit)
Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execu
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)
Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.