Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.647exploits catalogados
34.986CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Mini-stream Ripper 3.0.1.1 - '.pls' Universal Local Buffer Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow
Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long e
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)
Heap-based buffer overflow in Sorcerer Software MultiMedia Jukebox 4.0 Build 020124 allows remote attackers to cause a d
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_qpersonel - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_dhforum - SQL Injection
SQL injection vulnerability in the DhForum (com_dhforum) component for Joomla! allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpPowerCards 2.0 - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Application Recovery Manager - 'OmniInet.exe' Remote Buffer Overflow
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPInstantGallery 1.1 - 'admin.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CactuShop 6.0 - Database Disclosure
Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.1 < 6.2 - 'configdir' Remote Command Execution (Metasploit)
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
paFileDB 3.1 - Cross-Site Scripting
Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flatpress - Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Green Desktiny Customer Support Helpdesk 2.3.1 - SQL Injection
SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
kandalf upper 0.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftBiz B2B trading Marketplace Script - SQL Injection
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
jetAudio 8.0.0.0 - '.asx' Basic Local Crash (PoC)
Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method
Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winn Guestbook 2.4 / Winn.ws - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Winn Guestbook 2.4 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jax Guestbook 3.50 - Admin Login
Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct requ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.4.10 - 'myps.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in myps.php in MyBB (aka MyBulletinBoard) 1.4.10 allows remote attackers to inj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Snitz Forums 2000 - Database Disclosure
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PBX Phone System 2.x - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web Wiz NewsPad - Database Disclosure
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CastRipper (Windows XP SP2) - '.m3u' Local Stack Buffer Overflow
Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a lo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Reader / Acrobat - '.PDF' File Overflow
Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before
100RISCO
abrir ↗Exploit-DB
PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy RM to MP3 27.3.700 (Windows XP SP2) - Local Buffer Overflow
Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
webMathematica 3 - 'MSP' Script Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.