Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Vivvo CMS 3.4 - Multiple Vulnerabilities
SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivvo CMS 3.4 - Multiple Vulnerabilities
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlie
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivvo CMS 3.4 - Multiple Vulnerabilities
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 an
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BitTorrent 6.0.3 - '.torrent' Local Stack Buffer Overflow
Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nuke ET 3.4 - 'FCKeditor' Arbitrary File Upload
Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nuke ET 3.4 - 'FCKeditor' Arbitrary File Upload
Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FlashChat - 'connection.php' Role Filter Security Bypass
connection.php in FlashChat 5.0.8 allows remote attackers to bypass the role filter mechanism and gain administrative pr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Habari 0.5.1 - 'habari_username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook Web Access for Exchange Server 2003 - 'redir.asp' Open Redirection
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities
Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Elxis CMS 2008.1 - PHPSESSID Variable Session Fixation
Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setti
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris sadmind adm_build_path - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 0.9.2 Media Player - XSPF Memory Corruption
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nuked-klaN 1.7.7 / SP4.4 - Multiple Vulnerabilities
SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forw
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Database Server 11.1 - 'CREATE ANY Directory' Privilege Escalation
Oracle Database Server 10.1, 10.2, and 11g grants directory WRITE permissions for arbitrary pathnames that are aliased i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP Indir Iltaweb Alisveris Sistemi - 'xurunler.asp' SQL Injection
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LokiCMS 0.3.4 - 'writeconfig()' Remote Command Execution
LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Proxim Tsunami MP.11 2411 Wireless Access Point - 'system.sysName.0' SNMP HTML Injection
Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote aut
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI+ (PoC) (MS08-052) (2)
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold an
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GForge 4.5.19 - Multiple SQL Injections
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS 1.3.7 - 'HP-GL/2' Filter Remote Code Execution
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary co
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera Web Browser 8.51 - URI redirection Remote Code Execution
Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Konqueror 3.5.9 - 'color'/'bgcolor' Multiple Remote Crash Vulnerabilities
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a fo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HispaH textlinksads - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MPlayer - '.OGM' File Handling Denial of Service
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demons
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MPlayer - '.AAC' File Handling Denial of Service
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demons
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yerba SACphp 6.3 - Multiple Vulnerabilities
Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.0.3 - Internet Shortcut Same Origin Policy Violation
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'main.php?refer' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion
Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.