Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.366exploits catalogados
37.872CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.213GitHub PoC 15.592VulnCheck XDB 9.133Nuclei 4.441Metasploit 3.505✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
HEAT Call Logging 8.01 - SQL Injection
Multiple SQL injection vulnerabilities in the Call Logging feature in FrontRange HEAT 8.01 allow remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco ACE XML Gateway 6.0 - Internal IP Disclosure
Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
html2ps - 'include file' Server-Side Include Directive Directory Traversal
Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xen 3.x - pygrub Local Authentication Bypass
The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-vir
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)
Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Fastball 1.1.0 < 1.2 - 'league' SQL Injection
SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
e107 0.7.16 - Referer header Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audio Workstation - '.pls' Local Buffer Overflow (SEH)
Stack-based buffer overflow in MultiMedia Soft AdjMmsEng.dll 7.11.1.0 and 7.11.2.7, as distributed in multiple MultiMedi
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Lotus Connections 2.0.1 - 'simpleSearch.do' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OSSIM 2.1 - SQL Injection / Cross-Site Scripting
Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nginx 0.7.61 - WebDAV Directory Traversal
Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BPGames 1.0 - Blind SQL Injection
Multiple SQL injection vulnerabilities in BPowerHouse BPGames 1.0 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 9.0 - '.pls' Buffer Overflow
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of serv
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BPMusic 1.0 - Blind SQL Injection
SQL injection vulnerability in music.php in BPowerHouse BPMusic 1.0 allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J - Web Interface (Multiple Script) 'm[]' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J - Web Interface 'PATH_INFO' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JoomlaFacebook - SQL Injection
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vastal I-Tech DVD Zone - 'view_mag.php' SQL Injection
SQL injection vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Maxwebportal 1.365 - 'forum.asp' SQL Injection
Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vastal I-Tech DVD Zone - 'view_mag.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in view_mag.php in Vastal I-Tech DVD Zone allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Achievo 1.3.4 - Remote File Inclusion
PHP remote file inclusion vulnerability in debugger.php in Achievo before 1.4.0 allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component Tupinambis - SQL Injection
SQL injection vulnerability in the Tupinambis (com_tupinambis) component 1.0 for Mambo and Joomla! allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BPLawyerCaseDocuments - SQL Injection
SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - 'scripter.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - '/configuration' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_facebook - SQL Injection
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component SportFusion 0.2.x - SQL Injection
SQL injection vulnerability in the Kinfusion SportFusion (com_sportfusion) component 0.2.2 through 0.2.3 for Joomla! all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Juniper Junos 8.5/9.0 J-Web Interface - '/diagnose' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BPHolidayLettings 1.0 - Blind SQL Injection
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to exe
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.