Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.746exploits catalogados
38.126CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.415GitHub PoC 15.732VulnCheck XDB 9.162Nuclei 4.446Metasploit 3.509✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB✓ VexDay Proof
Autonomy KeyView Lotus 1-2-3 - File Multiple Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Note
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tilde CMS 4.x - 'aarstal' SQL Injection
SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSlideShow 0.9.9 - 'Directory' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpleGallery 0.1.3 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Satel Lite - 'Satellite.php' Local File Inclusion
Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Proverbs Web Calendar 1.1 - 'Password' SQL Injection
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VBTube 1.1 - Search Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.2/7.3 (Windows Vista/XP) - RSTP Response Code Execution
Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Bandersnatch 0.4 allow remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySpace Scripts Poll Creator - 'index.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VUNET Mass Mailer - 'default.asp' SQL Injection
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISPmanager 4.2.15 - Responder Privilege Escalation
The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell meta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDoub
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Rigs of Rods 0.33d - 'Vehicle Name' Buffer Overflow
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Citrix Netscaler 8.0 build 47.8 - Generic_API_Call.pl Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
I Hear U 0.5.6 - Multiple Remote Denial of Service Vulnerabilities
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service
The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Jet Engine - '.MDB' File Parsing Stack Overflow
Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Mi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Liferay Portal 4.1 Login Script - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueZ 1.x/2.x - HIDD Bluetooh HID Command Injection
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Huma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x Kernel - 'i386_set_ldt()' Integer Overflow (PoC)
Integer overflow in the kernel in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere Application Server 5.1.1 - WebContainer HTTP Request Header Security
Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Aruba MC-800 Mobility Controller - Screens Directory HTML Injection
Cross-site scripting (XSS) vulnerability in the login page in the management interface in the Aruba 800 Mobility Control
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ComponentOne FlexGrid 7.1 - ActiveX Control Multiple Buffer Overflow Vulnerabilities
Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CONTENTCustomizer 3.1 - 'Dialog.php' Unauthorized Access
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1
33RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KDE Konqueror 3.5.6 - Cookie Handling Denial of Service
KDE Konqueror 3.5.6 and earlier allows remote attackers to cause a denial of service (crash) via large HTTP cookie param
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIDA Web - Frame.HTML Multiple Unauthorized Access Vulnerabilities
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU TAR 1.15.91 / CPIO 2.5.90 - 'safer_name_suffix' Remote Denial of Service
Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000/2003 - Recursive DNS Spoofing (2)
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when
35RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.