Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to ca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing
Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/ToolResults.asp?sHostname' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.20 - Unauthorized HTTP Proxy
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OZJournals 1.2 - 'Vname' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vizra - 'A_Login.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU BinUtils 2.1x - Buffer Overflow
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU
46RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unclassified NewsBoard 1.6.1 patch 1 - Local File Inclusion
Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier ve
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Geeklog 1.4 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Path Conversion
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISPConfig 2.2.2/2.2.3 - 'Session.INC.php' Remote File Inclusion
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EPublisherPro 0.9.7 - 'Moreinfo.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'view.asp?Pic' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EImagePro - 'subList.asp?CatID' SQL Injection
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MultiCalendars 3.0 - 'All_calendars.asp' SQL Injection
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Intel Wireless Service - 's24evmon.exe' Shared Memory
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MyBB 1.1.1 - 'showthread.php' SQL Injection
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Infotech Storage Library - Heap Corruption
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to exe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EDirectoryPro - 'Search_result.asp' SQL Injection
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arb
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.