Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to hijack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password Reset
ZPanel 10.0.1 has insufficient entropy for its password reset process.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All Video Gallery 1.1 - SQL Injection
Unspecified vulnerability in the All Video Gallery (all-video-gallery) plugin before 1.2.0 for WordPress has unspecified
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution
Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3
43RISCO
abrir ↗Exploit-DB
Konqueror 4.7.3 - Memory Corruption
khtml/imload/scaledimageplane.h in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) a
28RISCO
abrir ↗Exploit-DB
Konqueror 4.7.3 - Memory Corruption
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is
23RISCO
abrir ↗Exploit-DB
Konqueror 4.7.3 - Memory Corruption
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NUL
23RISCO
abrir ↗Exploit-DB
SIEMENS Sipass Integrated 2.6 Ethernet Bus - Arbitrary Pointer Dereference
AscoServer.exe in the server in Siemens SiPass integrated MP2.6 and earlier does not properly handle IOCP RPC messages r
28RISCO
abrir ↗Exploit-DB
Konqueror 4.7.3 - Memory Corruption
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Axigen Mail Server - 'Filename' Directory Traversal
Multiple directory traversal vulnerabilities in the View Log Files component in Axigen Free Mail Server allow remote att
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolarWinds Orion IP Address Manager (IPAM) - 'search.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freefloat FTP Server - 'PUT' Remote Buffer Overflow
Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x8c Buffer Overflow (Metasploit)
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Operations Agent - Opcode 'coda.exe' 0x34 Buffer Overflow (Metasploit)
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bitweaver 2.8.1 - Multiple Vulnerabilities
Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS 2.2.1 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
Cross-site request forgery (CSRF) vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
subrion CMS 2.2.1 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wlcms-plugin.php in the White Label CMS plugin 1.5 for WordPress allows remo
23RISCO
abrir ↗Exploit-DB
Movable Type Pro 5.13en - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Six Apart (formerly Six Apart KK) Movable Type (MT) Pro 5.13 allows remote a
23RISCO
abrir ↗Exploit-DB
ATutor 1.2 - Multiple Vulnerabilities
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebTitan - 'logs-x.php' Directory Traversal
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to r
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS 3.1 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor
23RISCO
abrir ↗Exploit-DB
Oracle Database - Protocol Authentication Bypass
The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all
35RISCO
abrir ↗Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
jCore - '/admin/index.php?path' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject ar
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.