Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.097exploits catalogados
36.319CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.460Referência 22.936GitHub PoC 15.007VulnCheck XDB 8.843Nuclei 4.361Metasploit 3.490✓ só verificadosrecentespopularesrisco
19.066 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - ClientCopyImage Win32k (MS15-051) (Metasploit)
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vesta Control Panel 0.9.8 - OS Command Injection
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharac
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Photoshop CC2014 / Bridge CC 2014 - '.png' Parsing Memory Corruption
Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Photoshop CC2014 / Bridge CC 2014 - '.png' Parsing Memory Corruption
Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attac
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Photoshop CC2014 / Bridge CC 2014 - '.gif' Parsing Memory Corruption
Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to ex
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CUPS < 2.0.3 - Multiple Vulnerabilities
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-va
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tango DropBox 3.1.5 + PRO - Activex HeapSpray
Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSell
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lively Cart - SQL Injection
SQL injection vulnerability in LivelyCart 1.2.0 allows remote attackers to execute arbitrary SQL commands via the search
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ruby on Rails 4.0.x/4.1.x/4.2.x (Web Console v2) - Whitelist Bypass Code Execution (Metasploit)
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.13.0 < 3.19 (Ubuntu 12.04/14.04/14.10/15.04) - 'overlayfs' Local Privilege Escalation (Access /etc/shadow)
The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass
Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZCMS 1.1 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZCMS 1.1 - Multiple Vulnerabilities
SQL injection vulnerability in ZCMS 1.1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal
Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player)
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bonita BPM 6.5.1 - Multiple Vulnerabilities
Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Paypal Currency Converter Basic For WooCommerce - File Read
Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Bonita BPM 6.5.1 - Multiple Vulnerabilities
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Milw0rm Clone Script 1.0 - 'related.php?program' Blind SQL Injection
SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Nmedia WordPress Member Conversation 1.35.0 - 'doupload.php' Arbitrary File Upload
Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SysAid Help Desk Administrator Portal < 14.4 - Arbitrary File Upload (Metasploit)
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators t
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Realtek SDK - Miniigd UPnP SOAP Command Execution (Metasploit)
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link Devices - HNAP SOAPAction-Header Command Execution (Metasploit)
The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute ar
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Airties - login-cgi Buffer Overflow (Metasploit)
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 502
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Landing Pages 1.8.4 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin GigPress 2.3.8 - SQL Injection
Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPres
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sendio ESP - Information Disclosure
Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin NewStatPress 0.9.8 - Multiple Vulnerabilities
SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remo
38RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.