Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.003exploits catalogados
37.620CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.011GitHub PoC 15.501VulnCheck XDB 9.077Nuclei 4.427Metasploit 3.505✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component com_sef - Remote File Inclusion
PHP remote file inclusion vulnerability in the SEF404x (com_sef) component for Joomla! allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JE Awd Song - Persistent Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the JExtensions JE Awd Song (com_awd_song) component for Joomla! allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Adaptive Security Response - HTTP Response Splitting
CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series de
28RISCO
abrir ↗Exploit-DB
Joomla! Component jesubmit 1.4 - SQL Injection
SQL injection vulnerability in the JExtensions JE Story Submit (com_jesubmit) component 1.4 for Joomla! allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
feh 1.7 - '--wget-Timestamp' Remote Code Execution
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz - Multiple SQL Injections
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iManager - Multiple Vulnerabilities
Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (dae
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB
Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion (2)
Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Job Site Script - SQL Injection
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Video Community Portal - 'user-profile.php' SQL Injection
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iManager - Multiple Vulnerabilities
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Weborf HTTP Server - Denial of Service
Weborf HTTP Server 0.12.1 and earlier allows remote attackers to cause a denial of service (crash) via Unicode character
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when register_globals is ena
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD - 'mountnfs()' Denial of Service
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - 'printdetail.asp?Id' SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz MLM Script - SQL Injection
SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to e
23RISCO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RISCO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Matrimonial Script - SQL Injection
SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Asus Dpcproxy - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 an
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris Telnet - Remote Authentication Bypass (Metasploit)
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterpr
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netcat 1.10 - NT Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail SMTPD - AUTH CRAM-MD5 Buffer Overflow (Metasploit)
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - XSLT Integer Overflow
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.