Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.866exploits catalogados
35.812CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.573GitHub PoC 14.316VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
Microsoft Jet Database - 'msjet40.dll' Code Execution (Reverse Shell) (2)
Unknown vulnerability in Microsoft Jet DB engine (msjet40.dll) 4.00.8618.0, related to insufficient data validation, all
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RaidenFTPd 2.4 - Unauthorized File Access
Directory traversal vulnerability in RaidenFTPD before 2.4.2241 allows remote attackers to read arbitrary files via a ".
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'channel.asp?iChannel' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Logwatch 2.6 Secure Script - Denial of Service
The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via ce
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Neslo Desktop Rover 3.0 - Malformed Packet Remote Denial of Service
Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service (application cras
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' Dir URI Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'inc_poll_voting.asp?DAT_PARENT' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Labs - '.proFile' File URI Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netref 4.2 - 'Cat_for_gen.php' Remote PHP Script Injection
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'detail.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'type.asp?iCat' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'inc_vote.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'result.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'search.asp?iChannel' SQL Injection
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'cat.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ECommPro 3.0 - 'Admin/login.asp' SQL Injection
SQL injection vulnerability in verify.asp for Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal Pro 3.4 - 'default.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PMSoftware Simple Web Server 1.0 - Remote Stack Overflow
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET req
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ocean12 Calendar Manager 1.0 - Admin Form SQL Injection
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DUportal 3.1.2 - 'inc_rating.asp' Multiple SQL Injections
Multiple SQL injection vulnerabilities in DUware DUportal 3.1.2 and 3.1.2 SQL allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CityPost PHP LNKX 52.0 - 'message.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 98/2000 Explorer - Preview Pane Script Injection
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostroph
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CityPost Simple PHP Upload - 'Simple-upload-53.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Exchange Server - Remote Code Execution (MS05-021)
Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MVNForum 1.0 - Search Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or H
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/tts/index.php?filter' SQL Injection
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - '/sitemgr-site/index.php?category_id' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php?cats_app' SQL Injection
Multiple SQL injection vulnerabilities in index.php in eGroupware before 1.0.0.007 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eGroupWare 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in eGroupware before 1.0.0.007 allow remote attackers to inject arbi
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.