Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.533exploits catalogados
35.607CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.247VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
FTPRush 1.0.610 - Host Field Local Buffer Overflow
Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenan
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KISGB 5.1.1 - 'Authenticate.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Portal 9i/10g - Container_Tabs.jsp Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.2.1 - 'USER' Format String Denial of Service
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
A-Blog 1.0 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Portal 9.0.2 - Calendar.jsp Multiple HTTP Response Splitting Vulnerabilities
CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mono XSP 1.x/2.0 - Source Code Information Disclosure
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, whi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'MessageBox' Memory Corruption Local Denial of Service
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by callin
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Advanced Transfer Manager 1.30 - Source Code Disclosure
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Typo3 3.7/3.8/4.0 - 'Class.TX_RTEHTMLArea_PI1.php' Multiple Remote Command Execution Vulnerabilities
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - 'extproc' Local/Remote Command Execution
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KDE libkhtml 3.5 < 4.2.0 - Unhandled HTML Parse Exception
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Intel 2200BG 802.11 - Beacon frame Kernel Memory Corruption
Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corrupt
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 9i/10g - 'utl_file' FileSystem Access
Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
osTicket 1.2/1.3 Support Cards - 'view.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mini Web Shop 2.1.c - 'view.php?Viewcategory.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KDE LibkHTML 4.2 - NodeType Function Denial of Service
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Burak Yilmaz Download Portal - 'down.asp' SQL Injection
SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office Outlook Recipient Control - 'ole32.dll' Denial of Service
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RateMe 1.3.2 - 'main.inc.php' Remote File Inclusion
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Grsecurity Kernel PaX - Local Privilege Escalation
Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspe
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Contra Haber Sistemi 1.0 - 'Haber.asp' SQL Injection
SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Omniture SiteCatalyst - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Vendor Firewall - HIPS Process Spoofing
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows l
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 9/10 - '.mid' Denial of Service
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial o
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.