Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.133exploits catalogados
35.369CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.232GitHub PoC 14.112VulnCheck XDB 8.607Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection
Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM DB2 < 9.5 pack 3a - Connect Denial of Service
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cau
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle WebLogic IIS connector JSESSIONID - Remote Overflow
Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPRecipeBook 2.39 - 'course_id' SQL Injection
SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Community CMS 0.5 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Community CMS 0.5 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java System Calendar Server 6.3 - Duplicate URI Request Denial of Service
Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco ASA Appliance 7.x/8.0 WebVPN - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SAP MaxDB 7.4/7.6 - 'webdbm' Multiple Cross-Site Scripting Vulnerabilities
Stack-based buffer overflow in EAI WebViewer3D ActiveX control (webviewer3d.dll) in SAP AG SAPgui before 7.10 Patch Leve
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1.4 - 'members.php' SQL Injection
Unrestricted file upload vulnerability in adminpanel/scripts/addphotos.php in BandSite CMS 1.1.4 allows remote authentic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JobHut 1.2 - 'pk' SQL Injection
SQL injection vulnerability in browse.php in JobHut 1.2 and earlier allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AtomixMP3 < 2.3 - 'Playlist' Universal Overwrite (SEH)
Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in fil
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass
Diskos CMS 6.x stores sensitive information under the web root with insufficient access control, which allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
family connection 1.8.1 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BandSite CMS 1.1.4 - 'members.php' SQL Injection
SQL injection vulnerability in includes/content/member_content.php in BandSite CMS 1.1.4 allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iWare CMS 5.0.4 - Multiple SQL Injections
SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
glFusion 1.1.2 - 'COM_applyFilter()/order' SQL Injection
Multiple SQL injection vulnerabilities in the ExecuteQueries function in private/system/classes/listfactory.class.php in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pam-krb5 < 3.13 - Local Privilege Escalation
Russ Allbery pam-krb5 before 3.13, when linked against MIT Kerberos, does not properly initialize the Kerberos libraries
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.7.0 - 'NLST' Denial of Service
XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.2.1 - 'rename' Remote Buffer Overflow (SEH)
Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft GdiPlus - EMF GpFont.SetData Integer Overflow (PoC)
Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Femitter FTP Server 1.x - (Authenticated) Multiple Vulnerabilities
The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion
Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to inclu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modif
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zinf Audio Player 2.2.1 - '.pls' Universal Overwrite (SEH)
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WBB3 rGallery 1.2.3 - 'UserGallery' Blind SQL Injection
SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Codice CMS 2 - Command Execution (via SQL Injection)
SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.