Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.302exploits catalogados
35.469CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.301GitHub PoC 14.141VulnCheck XDB 8.646Nuclei 4.289Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin Google FeedBurner FeedSmith 2.2 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cart32 6.x - GetImage Arbitrary File Download
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName par
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DRBGuestbook 1.1.13 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Don Barnes DRBGuestbook 1.1.13 allows remote attackers to injec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Content Builder 0.7.5 - 'postComment.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Borland Interbase 2007/2007 SP2 - 'open_marker_file' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in Borland InterBase LI 8.0.0.53 through 8.1.0.253 on Linux, and possibly unspecified versio
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Borland Interbase 2007/2007 SP2 - 'jrd8_create_database' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Uebimiau Webmail 2.7.x - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Uebimiau 2.7.2 through 2.7.10 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Borland Interbase 2007/2007 SP2 - 'INET_connect' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Borland Interbase 2007 - 'PWD_db_aliased' Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Borland InterBase LI 8.0.0.53 through 8.1.0.253, and WI 5.1.1.680 through 8.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
id Software Doom 3 Engine - Console String Visualization Format String
Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FSD 2.052/3.000 - 'sysuser.cc sysuser::exechelp' 'HELP' Remote Overflow
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP Product Catalog 1.0 - 'default.asp' SQL Injection
SQL injection vulnerability in default.asp in ASP Product Catalog allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FSD 2.052/3.000 - 'servinterface.cc servinterface::sendmulticast' 'PIcallsign' Command Remote Overflow
Multiple stack-based buffer overflows in FSD 2.052 d9 and earlier, and FSFDT FSD 3.000 d9 and earlier, allow (1) remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netkamp Emlak Scripti - Multiple Input Validation Vulnerabilities
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ohesa Emlak Portal 1.0 - 'detay.asp?Emlak' SQL Injection
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ohesa Emlak Portal 1.0 - 'satilik.asp?Kategori' SQL Injection
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MD-Pro 1.0.76 - 'index.php' Firefox ID SQL Injection
SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.76 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tor < 0.1.2.16 - ControlPort Remote Rewrite
Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novus 1.0 - 'Buscar.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Arbitrary File Upload
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field fo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4/2.6 (x86-64) - System Call Emulation Privilege Escalation
The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86_64
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'UserPreferences.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'edit.jsp?edittime' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Login.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'NewGroup.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Diff.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JSPWiki 2.5.139 - 'Comment.jsp' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpNews 2.41.3 - 'backurl' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion
Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SimpNews 2.41.3 - 'l_username' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.