Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.900exploits catalogados
36.847CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.475Referência 23.360GitHub PoC 15.228VulnCheck XDB 8.946Nuclei 4.390Metasploit 3.501✓ só verificadosrecentespopularesrisco
24.475 exploits
Exploit-DB
SaltOS Erp Crm 3.1 r8126 - Database File Download
SaltOS 3.1 r8126 contains a database download vulnerability.
23RISCO
abrir ↗Exploit-DB
SaltOS Erp Crm 3.1 r8126 - SQL Injection
SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.
28RISCO
abrir ↗Exploit-DB
ASRock Drivers - Privilege Escalation
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Str
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
systemd - 'reexec' State Injection
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
systemd - 'chown_one()' Dereference Symlinks
systemd: chown_one() can dereference symlinks
41RISCO
abrir ↗Exploit-DB
AjentiCP 1.2.23.13 - Cross-Site Scripting
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in Fi
23RISCO
abrir ↗Exploit-DB
xorg-x11-server < 1.20.3 - Local Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RISCO
abrir ↗Exploit-DB
ProjeQtOr Project Management Tool 7.2.5 - Remote Code Execution
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file
23RISCO
abrir ↗Exploit-DB
Adult Filter 1.0 - Buffer Overflow (SEH)
Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file.
23RISCO
abrir ↗Exploit-DB
Ekushey Project Manager CRM 3.1 - Cross-Site Scripting
In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebEx - Local Service Permissions Exploit (Metasploit)
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebExec - (Authenticated) User Code Execution (Metasploit)
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
61RISCO
abrir ↗Exploit-DB
User Management 1.1 - Cross-Site Scripting
Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libtiff 4.0.9 - Decodes Arbitrarily Sized JBIG into a Target Buffer
LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3
28RISCO
abrir ↗Exploit-DB
Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
45RISCO
abrir ↗Exploit-DB
Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
100RISCO
abrir ↗Exploit-DB
LANGO Codeigniter Multilingual Script 1.0 - Cross-Site Scripting
LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name par
23RISCO
abrir ↗Exploit-DB
Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramete
23RISCO
abrir ↗Exploit-DB
exim 4.90 - Remote Code Execution
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted mes
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - SetImeInfoEx Win32k NULL Pointer Dereference (Metasploit)
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
100RISCO
abrir ↗Exploit-DB
Keybase keybase-redirector - '$PATH' Local Privilege Escalation
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibSSH 0.7.6 / 0.8.4 - Unauthorized Access
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Exploit-DB
libSSH - Authentication Bypass
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Exploit-DB
BigTree CMS 4.2.23 - Cross-Site Scripting
In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (ak
23RISCO
abrir ↗Exploit-DB
TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure
TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie
38RISCO
abrir ↗Exploit-DB
Git Submodule - Arbitrary Code Execution
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VLC Media Player - MKV Use-After-Free (Metasploit)
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.