Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - 'events.tar?source_ip' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quezza BB 1.0 - 'quezza_root_path' File Inclusion
PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
obotix IP Camera M1 1.9.4 .7/M10 2.0.5.2 - help Script Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open Wiki 0.78 - 'ow.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web scri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.06 - 'Attachment mod_mime' Remote Command Execution
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Bypass
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Fusion 6.00.306 - 'srch_where' SQL Injection
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPRemoteView - 'PRV.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNUnet 0.7.0d - Empty UDP Packet Remote Denial of Service
GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Applet - Font.createFont Remote Denial of Service
Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Confixx 3.0/3.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RadScripts RadLance 7.0 - 'popup.php' Local File Inclusion
Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.06 - 'name' SQL Injection (mq=off)
SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pixaria PopPhoto 3.5.4 - 'CFG[popphoto_base_path]' Remote File Inclusion
PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Stu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPODP 1.5 - 'ODP.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Script Tools PSY Auction - 'item.php?id' SQL Injection
SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Bypass (Metasploit)
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a larg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Empire 4.3.2 - 'strncat' Denial of Service
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application cr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to ca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of s
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.