Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.529exploits catalogados
37.964CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.284GitHub PoC 15.675VulnCheck XDB 9.136Nuclei 4.445Metasploit 3.507✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Zoph 0.7.2.1 - SQL Injection
SQL injection vulnerability in Zoph 0.7.2.1 allows remote attackers to execute arbitrary SQL commands via unspecified ve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger 2.0 Client - Buffer Overflow
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated admi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdFlux' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'page.php?name' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - Authentication Bypass
RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RSS-aggregator 1.0 - 'IdTag' SQL Injection
Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities
The syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a denial of service (applic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Surgemail 39e-1 - (Authenticated) IMAP Remote Buffer Overflow (Denial of Service) (PoC)
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenLDAP 2.3.41 - BER Decoding Remote Denial of Service
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FaName 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location propert
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7/8 Beta 1 - Frame Location Cross Domain Security Bypass
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location propert
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AceFTP 3.80.3 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP se
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UUSee 2008 - UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download
Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php?id' SQL Injection
Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Rhythmbox 0.11.5 - '.Playlist' File Denial of Service
GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS - 'viewarticle2.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (1)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
5th street - 'dx8render.dll' Format String
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Ste
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.9 < 2.6.25 (RHEL 4) - utrace and ptrace Local Denial of Service (2)
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PEGames - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'archive.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'members.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chipmunk Blog - 'photos.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blog (Blogger) allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Benja CMS 0.1 - '/admin/admin_edit_topmenu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.