Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.724exploits catalogados
35.724CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
VihorDesign - 'index.php' Remote File Inclusion
Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.x/2.5.x/2.6.x - 'Sockaddr_In.Sin_Zero' Kernel Memory Disclosure
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - 'createTextRang' Remote Code Execution
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arb
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Business Systems Manager 3.1 - APWC_Win_Main.jsp Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMoblog 0.5 - 'Img.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoMoblog 1.0 - 'Img.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RealNetworks (Multiple Products) - Multiple Buffer Overflow Vulnerabilities
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Playe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BomberClone < 0.11.6.2 - Error Messages Remote Buffer Overflow
Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2003 - IGMP v3 Denial of Service (MS06-007) (2)
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang)
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
1WebCalendar 4.0 - 'viewEvent.cfm?EventID' SQL Injection
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Motorola - BlueTooth Interface Dialog Spoofing
The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones do
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
1WebCalendar 4.0 - 'mainCal.cfm' SQL Injection
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
1WebCalendar 4.0 - '/news/newsView.cfm?NewsID' SQL Injection
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 Firepass 4100 SSL VPN - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibVC - '.VCard' 003 Processing Buffer Overflow
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpWebSite 0.8.2/0.8.3 - 'article.php?sid' SQL Injection
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpWebSite 0.8.2/0.8.3 - 'friend.php?sid' SQL Injection
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Verisign MPKI 6.0 - 'Haydn.exe' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X.Org X11 (X11R6.9.0/X11R7.0) - Local Privilege Escalation
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid funct
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercur MailServer 5.0 SP3 - 'IMAP' Remote Buffer Overflow (1)
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BetaParticle Blog 6.0 - 'fldGalleryID' SQL Injection
Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Extcalendar 1.0 - Cross-Site Scripting
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3 - 'cart.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Woltlab Burning Board 2.3.4 - 'Class_DB_MySQL.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3 - 'index.php' SQL Injection
SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) show a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient acc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board (IP.Board) 2.0.4 - Mail Action 'MID' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbit
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.