Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
80.708exploits catalogados
37.437CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 23.871GitHub PoC 15.398VulnCheck XDB 9.029Nuclei 4.426Metasploit 3.502✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (2)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tunnelblick - Local Privilege Escalation (1)
Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r
23RISCO
abrir ↗Exploit-DB
Solaris 10 Patch 137097-01 - Symlink Privilege Escalation
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit)
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OTRS Open Technology Real Services 3.1.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Directory traversal vulnerability in javatester_init.php in IBM Lotus Protector for Mail Security 2.1, 2.5, 2.5.1, and 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xeams email server 4.4 build 5720 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Synametrics Technologies Xeams 4.4 Build 5720 allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ManageEngine ServiceDesk Plus 8.1 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'admin.php?xml_name' Arbitrary PHP Code Execution
Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary P
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Proventia Network Mail Security System 2.5 - POST File Read
Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ubisoft uplay 2.0.3 - ActiveX Control Arbitrary Code Execution (Metasploit)
The web browser plugin for Ubisoft Uplay PC before 2.0.4 allows remote attackers to execute arbitrary programs via the -
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'index.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
escon supportportal pro 3.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ESCON SupportPortal Professional Edition 3.0 allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 6.0a4 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Plixer Scrutinizer NetFlow and sFlow Analyzer 9 - Default MySQL Credential (Metasploit)
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
winwebmail server 3.8.1.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in WinWebMail Server 3.8.1.6 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
smartermail free 9.2 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mailenable enterprise 6.5 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Enterprise 6.5 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB
Openconstructor CMS 3.12.0 - 'id' Multiple SQL Injections
Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpList 2.10.18 - 'unconfirmed' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
afterlogic mailsuite pro (VMware Appliance) 6.3 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in AfterLogic MailSuite Pro 6.3 allow remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 10.0 and 10.0.0.3 allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Axigen Mail Server 8.0.1 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mailtraq 2.17.3.3150 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mailtraq 2.17.3.3150 allow remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the WP SimpleMail plugin 1.0.6 for WordPress allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mini Mail Dashboard Widget plugin 1.42 for WordPress allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBBoard - 'member_id' Validation Password Manipulation
The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.