Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcConnectionPoolNew1.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jmsConnectionNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/jdbcResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/resourceNode/customResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlassFish Application Server - '/Applications/lifecycleModulesNew.jsf' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
S.T.A.L.K.E.R. 1.0.06 - Remote Denial of Service
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Crysis 1.21 - 'keyexchange' Packet Information Disclosure
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by send
23RISCO
abrir ↗Exploit-DB
Vim 7.x - Vim Script Multiple Command Execution Vulnerabilities
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BASE 1.2.4 - 'base_qry_common.php' Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl
50RISCO
abrir ↗Exploit-DB
GSC Client 1.00 2067 - Privilege Escalation
GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin 3.6.10/3.7.1 - 'redirect' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebChamado 1.1 - 'tsk_id' SQL Injection
SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Glub Tech Secure FTP 2.5.15 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - '/admin/login.php?Username' SQL Injection
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'last_records.php?annuaire' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'annuaire.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flat Calendar 1.1 - Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) ad
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPEasyData 1.5.4 - 'annuaire.php?annuaire' SQL Injection
Multiple SQL injection vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tornado Knowledge Retrieval System 4.2 - 'p' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun GlassFish 2.1 - 'name' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin inter
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Todd Woolums ASP News Management 2.2 - SQL Injection
Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals is enabled, allow remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ALFTP FTP Client 4.1/5.0 - 'LIST' Directory Traversal
Directory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0 allows remote FTP server
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 FirePass 6.0.2.3 - '/vdesk/admincon/index.php?sql_matchscope' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 FirePass 6.0.2.3 - '/vdesk/admincon/webyfiers.php?css_exceptions' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.