Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Perl - 'rmtree()' Function Local Insecure Permissions
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'archive.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
World in Conflict 1.008 - Null Pointer Remote Denial of Service
World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and cra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_submenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PEGames - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SunAge 1.8.1 - Multiple Denial of Service Vulnerabilities
Integer overflow in Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service (crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HoMaP-CMS 0.1 - 'plugin_admin.php' Remote File Inclusion
PHP remote file inclusion vulnerability in html/admin/modules/plugin_admin.php in HoMaP-CMS 0.1 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NASM 2.0 - 'ppscan()' Off-by-One Buffer Overflow
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteXS CMS 0.1.1 - Arbitrary File Upload / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GL-SH Deaf Forum 6.5.5 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Classic FTP 1.02 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP serve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WISE-FTP 4.1/5.5.8 - FTP Client 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceBIT WISE-FTP 4.1.0 and 5.5.8 allows remote FTP servers to crea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Diigo Toolbar and Diigolet Comment Feature - HTML Injection / Information Disclosure
Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Folder Lock 5.9.5 - Weak Password Encryption Local Information Disclosure
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Yektaweb Academic Web Tools CMS 1.4.2.8 - Multiple Vulnerabilities
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not proper
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_m
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Screen 4.0.3 (OpenBSD) - Local Authentication Bypass
GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at the password prompt. NOTE: multiple t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraEdit 14.00b - FTP/SFTP 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word 2000/2002 - Bulleted List Handling Remote Memory Corruption
Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenDocMan 1.x - 'out.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/customResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3D-FTP 8.01 - 'LIST' / 'MLSD' Directory Traversal
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP serv
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsDestinationNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client - ActiveX Control Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows bef
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.