Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.105exploits catalogados
40.548CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.065VulnCheck XDB 10.121Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.106 exploits
Exploit-DB
WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities
The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitr
23RISCO
abrir ↗Metasploit500
Adobe Flash Player ByteArray UncompressViaZlibVariant Use After Free
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Window
100RISCO
abrir ↗Metasploit500
Adobe Flash Player Shader Buffer Overflow
Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS
60RISCO
abrir ↗Exploit-DB
WordPress Plugin iMember360 3.8.012 < 3.9.001 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow
23RISCO
abrir ↗Exploit-DB
McAfee ePolicy Orchestrator 4.6.0 < 4.6.5 - 'ePowner' Multiple Vulnerabilities
SQL injection vulnerability in the Agent-Handler component in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x b
23RISCO
abrir ↗Exploit-DB
GeoCore MAX DB Ver. 7.3.3 - Blind SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic
23RISCO
abrir ↗Exploit-DB
Symantec Endpoint Protection Manager 12.1.x - Overflow (SEH) (PoC)
Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.
23RISCO
abrir ↗GitHub PoC★ 1
CVE-2014-0094 test program for struts1
The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via t
60RISCO
abrir ↗Exploit-DB
miSecureMessages 4.0.1 - Session Management / Authentication Bypass
AMTELCO miSecure Information Exposure
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kolibri Web Server 2.0 - GET Stack Buffer Overflow
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET req
28RISCO
abrir ↗Exploit-DB
Acunetix 8 build 20120704 - Remote Stack Overflow
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read
dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroo
50RISCO
abrir ↗Exploit-DB
WD Arkeia Virtual Appliance 10.2.9 - Local File Inclusion
Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmw
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL TLS Heartbeat Extension - 'Heartbleed' Information Leak (2) (DTLS Support)
20RISCO
abrir ↗Metasploit600
AlienVault OSSIM SQL Injection and Remote Code Execution
A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5
43RISCO
abrir ↗Exploit-DB
HP Laser Jet - JavaScript Persistent Cross-Site Scripting via PJL Directory Traversal
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printer
28RISCO
abrir ↗Exploit-DB
Sixnet Sixview 2.4.1 - Web Console Directory Traversal
Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - Local Security Bypass
The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user s
23RISCO
abrir ↗Exploit-DB
kitForm CRM Extension 0.43 - 'sorter.ph?sorter_value' SQL Injection
SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (K
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)
Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10
28RISCO
abrir ↗Metasploit600
Oracle Event Processing FileUploadServlet Arbitrary File Upload
Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - Regular Expression Heap Overflow (Metasploit)
Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x
60RISCO
abrir ↗Exploit-DB
Teracom Modem T2-B-Gawv1.4U10Y-BI - Cross-Site Request Forgery
Multiple cross-site request forgery (CSRF) vulnerabilities in webconfig/wlan/country.html/country in the Teracom T2-B-Ga
23RISCO
abrir ↗GitHub PoC★ 4
openssl Heartbleed bug(CVE-2014-0160) check for Node.js
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗VulnCheck XDB
infoleak
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗Exploit-DB
NRPE 2.15 - Remote Command Execution
Incomplete blacklist vulnerability in nrpe.c in Nagios Remote Plugin Executor (NRPE) 2.15 and earlier allows remote atta
28RISCO
abrir ↗Exploit-DB
Linux Kernel - 'group_info' refcounter Overflow Memory Corruption
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SAP Router - Timing Attack Password Disclosure
The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jzip - Buffer Overflow (PoC) (SEH Unicode)
Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.