Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.151exploits catalogados
35.370CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
MataChat - 'input.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in input.php in MataChat allow remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libvirt_proxy 0.5.1 - Local Privilege Escalation
Buffer overflow in the proxyReadClientSocket function in proxy/libvirt_proxy.c in libvirt_proxy 0.5.1 might allow local
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.0.9 - 'nsTextFrame::ClearTextRun()' Remote Memory Corruption
The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - 'adm/file.cgi' Multiple Directory Traversal Vulnerabilities
Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DirectAdmin 1.33.3 - '/CMD_DB' Backup Action Insecure Temporary File Creation
JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla (Multiple Products) - Server Refresh Header Cross-Site Scripting
Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle RDBms 10.2.0.3/11.1.0.6 - TNS Listener (PoC)
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 8.0 Client - Denial of Service
NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of servic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java System Delegated Administrator 6.x - HTTP Response Splitting
CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VS PANEL 7.3.6 - 'Cat_ID' SQL Injection
SQL injection vulnerability in showcat.php in VS PANEL 7.3.6 allows remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZ Webitor - Authentication Bypass
Multiple SQL injection vulnerabilities in login.php in EZ Webitor allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
1by1 1.67 - '.m3u' Local Stack Overflow (PoC)
Stack-based buffer overflow in 1by1 1.67 (aka 1.6.7.0) allows remote attackers to cause a denial of service (application
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat Stronghold Web Server 2.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WB News 2.1.2 - Insecure Cookie Handling
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cook
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Creasito E-Commerce 1.3.16 - Authentication Bypass
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito (aka creasito e-commerce content manager) 1.3.16,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - EMBED Memory Corruption (PoC) (MS09-014)
Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on W
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Photo Pro 2.0 - 'section' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TotalCalendar 2.4 - Remote Password Change
admin/manage_users.php in TotalCalendar 2.4 does not require administrative authentication, which allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6 (Debian 4.0 / Ubuntu / Gentoo) UDEV < 1.4.1 - Local Privilege Escalation (1)
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Online Contact Manager (formerly EContact PRO) 3.0 allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) ye
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebGlimpse 2.18.7 - 'DOC' Directory Traversal
Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbit
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Malleo 1.2.3 - 'admin.php' Local File Inclusion
Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbi
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.