Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.532exploits catalogados
35.607CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.407GitHub PoC 14.246VulnCheck XDB 8.663Nuclei 4.287Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
Aspee Ziyaretci Defteri - 'giris.asp' Multiple Field SQL Injections
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD 3.1 - 'FTPd / Tnftpd' Port Remote Buffer Overflow
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ContentServ 4.x - '/admin/FileServer.php' File Disclosure
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload
Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlazeVideo HDTV Player 2.1 - '.PLF' Local Buffer Overflow
Stack-based buffer overflow in BlazeVideo HDTV Player 3.5 and earlier allows remote attackers to execute arbitrary code
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpGraphy 0.9.12 - Privilege Escalation / Commands Execution
phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acer LunchApp.APlunch - ActiveX Control Command Execution
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD - 'FTPd / Tnftpd' Remote Stack Overflow (PoC)
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LDU 8.x - 'polls.php' SQL Injection
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Remote Overflow
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
b2evolution 1.8.5 < 1.9b - 'import-mt.php' Remote File Inclusion
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - 'Shared_Region_Make_Private_Np' Kernel Function Local Memory Corruption
Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows loca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
P-News 2.0 - 'user.txt' Remote Password Disclosure
P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Clickblog - 'Displaycalendar.asp' SQL Injection
SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
uPhotoGallery 1.1 - 'thumbnails.asp?ci' SQL Injection
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
uPhotoGallery 1.1 - 'Slideshow.asp?ci' SQL Injection
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ClickContact - 'default.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Overflow (PoC)
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Evolve Shopping Cart - 'products.asp' SQL Injection
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - AppleTalk AIOCRegLocalZN IOCTL Stack Buffer Overflow
Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN io
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.0 - 'sreplace' Remote Stack Overflow (Metasploit)
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably auth
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Mach-O Binary Loading Integer Overflow
Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
fipsShop - Multiple SQL Injections
Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel WebHost Manager 3.1 - 'dofeaturemanager?feature' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sisfo Kampus 0.8 - Remote File Inclusion / Download
PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary P
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel WebHost Manager 3.1 - 'addon_configsupport.cgi?supporturl' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel WebHost Manager 3.1 - 'dochangeemail?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cPanel WebHost Manager 3.1 - 'editpkg?pkg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated use
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.