Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Joomla! Component com_lowcosthotels - Blind SQL Injection
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_lowcosthotels - Blind SQL Injection
SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.0.5 - location.hash Remote Crash
Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_lowcosthotels - Blind SQL Injection
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'qdisc_run()' Local Denial of Service
The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QEMU 0.9 / KVM 36/79 - VNC Server Remote Denial of Service
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection
SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component com_hbssearch 1.0 - Blind SQL Injection
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easysitenetwork Jokes Complete Website - 'joke.php' SQL Injection
SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DO-CMS 3.0 - 'p' Multiple SQL Injections
SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ESET Smart Security 3.0.672 - 'epfw.sys' Local Privilege Escalation
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows loca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPcksec 0.2 - 'PHPcksec.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Injader 2.1.1 - SQL Injection / HTML Injection
Cross-site scripting (XSS) vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - XML Parsing Buffer Overflow (1)
Microsoft Internet Explorer 7.0 on Windows XP and Windows Server 2003 allows remote attackers to have an unspecified imp
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FLDS 1.2a - 'redir.php' SQL Injection
SQL injection vulnerability in lpro.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FLDS 1.2a - 'redir.php' SQL Injection
SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flatnux - html/JavaScript Injection Cookie Grabber
Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProSysInfo TFTP server TFTPDWIN 0.4.2 - Universal Remote Buffer Overflow
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP-DEV XM Events Diary - 'cat' SQL Injection
SQL injection vulnerability in default.asp in ASP-DEv XM Events Diary allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Basic - ActiveX Controls mscomct2.ocx Buffer Overflow (PoC)
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) i
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter Bypass
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Ad Server Solutions Products - 'logon_processing.jsp' SQL Injection
SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.27.8 - ATMSVC Local Denial of Service
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of serv
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPmyGallery 1.5beta - '/common-tpl-vars.php' Local/Remote File Inclusion
Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPmyGallery 1.0beta2 - Local/Remote File Inclusion
Directory traversal vulnerability in _conf/_php-core/common-tpl-vars.php in PHPmyGallery 1.5 beta allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Professional Download Assistant 0.1 - SQL Injection
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PrestaShop 1.1 - 'order.php?PATH_INFO' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.