Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.651exploits catalogados
38.071CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.381GitHub PoC 15.700VulnCheck XDB 9.136Nuclei 4.445Metasploit 3.507✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
F5 FirePass 6.0.2.3 - '/vdesk/admincon/webyfiers.php?css_exceptions' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP StorageWorks - NSI Double Take Remote Overflow (Metasploit)
Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting
Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC)
Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-as
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll RegistryString' Buffer Overflow
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Sup
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support bef
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QuickerSite 1.8.5 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant Support 1.0.22 - 'HPISDataManager.dll ExtractCab' ActiveX Control Buffer Overflow
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in H
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component JooBlog 0.1.1 - Blind SQL Injection
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Alt-N MDaemon 9.6.5 - Multiple Remote Buffer Overflows (PoC)
The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
PHP remote file inclusion vulnerability in social_game_play.php in Social Site Generator (SSG) 2.0 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TorrentTrader Classic 1.x - 'scrape.php' SQL Injection
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Social Site Generator 2.0 - 'sgc_id' SQL Injection
Social Site Generator (SSG) 2.0 allows remote attackers to read arbitrary files via the file parameter to (1) filedload.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DotNetNuke 4.8.3 - 'Default.aspx' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - docushare/dsweb/ServicesLib/Group URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dvbbs 8.2 - 'login.asp' Multiple SQL Injections
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via th
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - dsdn/dsweb/Services/User URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBookingCalendar 10 d - SQL Injection
SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xerox DocuShare 6 - dsdn/dsweb/SearchResults URI Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Calcium 3.10/4.0.4 - 'Calcium40.pl' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tr Script News 2.1 - 'news.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
miniCWB 2.1.1 - 'connector.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in javascript/editor/editor/filemanager/browser/mcpuk/connectors/php
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.