Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
80.930exploits catalogados
37.572CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
Directory traversal vulnerability in languages.inc.php in DynPG CMS 4.1.1 and 4.2.0, when magic_quotes_gpc is disabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
enano CMS 1.1.7pl1 - Multiple Vulnerabilities
index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclime 1.1.2b - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB
DynPG 4.2.0 - Multiple Vulnerabilities
languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.x - Apache Tomcat Configuration File Arbitrary Command Execution
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arb
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
enano CMS 1.1.7pl1 - Multiple Vulnerabilities
SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and
23RISCO
abrir ↗Exploit-DB
Diferior 8.03 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP LaserJet - Directory Traversal in PJL Interface
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer
28RISCO
abrir ↗Exploit-DB
CA Internet Security Suite 2010 - 'KmxSbx.sys' Kernel Pool Overflow
Integer overflow in KmxSbx.sys 6.2.0.22 in CA Internet Security Suite Plus 2010 allows local users to cause a denial of
23RISCO
abrir ↗Exploit-DB
Skeletonz CMS - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the comment feature in Skeletonz CMS 1.0, when the Blog plugin is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection
SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
SQL injection vulnerability in index.php in Jurpopage 0.2.0 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jurpopage 0.2.0 - SQL Injection
Multiple SQL injection vulnerabilities in index.php in Jurpopage 0.2.0 allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Unix Sockets Local Denial of Service
The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when ma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy Banner 2009.05.18 - '/member.php' Multiple SQL Injection / Authentication Bypass
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_g
23RISCO
abrir ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
The setup_arg_pages function in fs/exec.c in the Linux kernel before 2.6.36, when CONFIG_STACK_GROWSDOWN is used, does n
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SystemTap - Local Privilege Escalation
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow
38RISCO
abrir ↗Exploit-DB
Linux Kernel 2.6.37 - 'setup_arg_pages()' Denial of Service
fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repre
23RISCO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RISCO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RISCO
abrir ↗Exploit-DB
SiteEngine 7.1 - SQL Injection
SQL injection vulnerability in comments.php in SiteEngine 7.1 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell NetIdentity Agent - XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute ar
50RISCO
abrir ↗Exploit-DB
Free Simple Software - SQL Injection
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10gR2 - TNS Listener AUTH_SESSKEY Buffer Overflow (Metasploit)
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 8i - TNS Listener 'ARGUMENTS' Remote Buffer Overflow (Metasploit)
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Motorola Timbuktu Pro - Directory Traversal / Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu P
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.