Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentespopularesrisco
22.786 exploits
Exploit-DB
Microsoft Internet Explorer 11 - 'Js::RegexHelper::RegexReplace' Use-After-Free
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Se
35RISCO
abrir ↗Exploit-DB
MagniComp SysInfo - mcsiwrapper Privilege Escalation (Metasploit)
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow
38RISCO
abrir ↗Exploit-DB
Microsoft Windows - StorSvc SvcMoveFileInheritSecurity Arbitrary File Creation Privilege Escalation
Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, versi
23RISCO
abrir ↗Exploit-DB
Microsoft Windows Kernel - 'nt!RtlpCopyLegacyContextX86' Stack Memory Disclosure
The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Window
23RISCO
abrir ↗Exploit-DB
Microsoft Windows - Global Reparse Point Security Feature Bypass/Elevation of Privilege
NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an eleva
23RISCO
abrir ↗Exploit-DB
Microsoft Windows - NPFS Symlink Security Feature Bypass/Elevation of Privilege/Dangerous Behavior
The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege
23RISCO
abrir ↗Exploit-DB
October CMS < 1.0.431 - Cross-Site Scripting
October CMS through 1.0.431 allows XSS by entering HTML on the Add Posts page.
23RISCO
abrir ↗Exploit-DB
Joomla! Component Project Log 1.5.3 - 'search' SQL Injection
SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.
23RISCO
abrir ↗Exploit-DB
Joomla! Component JB Bus 2.3 - 'order_number' SQL Injection
SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.
23RISCO
abrir ↗Exploit-DB
ABRT - 'raceabrt' Privilege Escalation (Metasploit)
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac
38RISCO
abrir ↗Exploit-DB
Joomla! Component NeoRecruit 4.1 - SQL Injection
SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under
23RISCO
abrir ↗Exploit-DB
Joomla! Component jGive 2.0.9 - SQL Injection
SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries paramete
23RISCO
abrir ↗Exploit-DB
Joomla! Component ccNewsletter 2.x.x 'id' - SQL Injection
SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber actio
23RISCO
abrir ↗Exploit-DB
Joomla! Component Aist 2.0 - 'id' SQL Injection
SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.
23RISCO
abrir ↗Exploit-DB
JBoss Remoting 6.14.18 - Denial of Service
A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an e
28RISCO
abrir ↗Exploit-DB
EPIC MyChart - X-Path Injection
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing s
28RISCO
abrir ↗Exploit-DB
Joomla! Component Fastball 2.5 - 'season' SQL Injection
SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action.
23RISCO
abrir ↗Exploit-DB
Joomla! Component Timetable Responsive Schedule For Joomla! 1.5 - 'alias' SQL Injection
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
28RISCO
abrir ↗Exploit-DB
Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;
60RISCO
abrir ↗Exploit-DB
Joomla! Component Staff Master 1.0 RC 1 - SQL Injection
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff r
23RISCO
abrir ↗Exploit-DB
Joomla! Component DT Register 3.2.7 - 'id' SQL Injection
SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.
23RISCO
abrir ↗Exploit-DB
Joomla! Component Solidres 2.5.1 - SQL Injection
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.
23RISCO
abrir ↗Exploit-DB
Joomla! Component JS Autoz 1.0.9 - SQL Injection
SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
28RISCO
abrir ↗Exploit-DB
Joomla! Component File Download Tracker 3.0 - SQL Injection
SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.
23RISCO
abrir ↗Exploit-DB
Joomla! Component Gallery WD 1.3.6 - SQL Injection
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.
23RISCO
abrir ↗Exploit-DB
Joomla! Component JomEstate PRO 3.7 - 'id' SQL Injection
SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed acti
23RISCO
abrir ↗Exploit-DB
Joomla! Component Kubik-Rubik Simple Image Gallery Extended (SIGE) 3.2.3 - Cross-Site Scripting
Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScrip
23RISCO
abrir ↗Exploit-DB
Joomla! Component AllVideos Reloaded 1.2.x - 'divid' SQL Injection
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
23RISCO
abrir ↗Exploit-DB
Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a l
28RISCO
abrir ↗Exploit-DB
Joomla! Component Smart Shoutbox 3.0.0 - SQL Injection
SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI.
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.