Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB
Novell Client 4.91 SP4 - 'nwfs.sys' Local Privilege Escalation (Metasploit)
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possi
38RISCO
abrir ↗Exploit-DB
Alienvault Open Source SIEM (OSSIM) 4.1 - Multiple SQL Injection Vulnerabilities
Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Top Games Script 1.2 - 'play.php?gid' SQL Injection
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpEventCalendar 0.2.3 - Multiple Vulnerabilities
SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute
23RISCO
abrir ↗Metasploit300
MediaCoder .M3U Buffer Overflow
Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anyw
28RISCO
abrir ↗Exploit-DB
Elemata CMS RC3.0 - 'global.php?id' SQL Injection
SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary S
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP System Management Homepage - JustGetSNMPQueue Command Injection (Metasploit)
ginkgosnmp.inc in HP System Management Homepage (SMH) allows remote authenticated users to execute arbitrary commands vi
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MoinMoin - twikidraw Action Traversal Arbitrary File Upload (Metasploit)
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action
50RISCO
abrir ↗Exploit-DB
Linksys X3000 1.0.03 build 001 - Multiple Vulnerabilities
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command inj
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 9.0 < 9.1 - 'mmap/ptrace' Local Privilege Escalation
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISCO
abrir ↗Exploit-DB
GLPI 0.83.8 - Multiple Vulnerabilities
GLPI 0.83.7 has Local File Inclusion in common.tabs.php.
28RISCO
abrir ↗Exploit-DB
GLPI 0.83.8 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Metasploit300
IPMI 2.0 Cipher Zero Authentication Bypass Scanner
The Supermicro BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands b
23RISCO
abrir ↗Metasploit300
IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote
60RISCO
abrir ↗Metasploit300
Canon Printer Wireless Configuration Disclosure
English/pages_MacUS/wls_set_content.html on the Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX9
18RISCO
abrir ↗Metasploit500
Java Applet ProviderSkeleton Insecure Invoke Method
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and
60RISCO
abrir ↗Metasploit300
Canon Wireless Printer Denial Of Service
The Canon MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922 printers allow remote attackers to cause
23RISCO
abrir ↗Metasploit500
FreeBSD 9 Address Space Manipulation Privilege Escalation
The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEAS
38RISCO
abrir ↗GitHub PoC
tarunyadav/fix-cve-2013-2094
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RISCO
abrir ↗Metasploit600
Havalite CMS Arbitary File Upload Vulnerability
Havalite CMS Arbitary File Upload RCE
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp 5.12 - '.m3u' Local Stack Buffer Overflow
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service
28RISCO
abrir ↗GitHub PoC
CVE-2011-1485 - Published: 2011-04-01 - PolicyKit:
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privil
38RISCO
abrir ↗GitHub PoC★ 4
CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERF_EVENTS local root x86/x86_64
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data t
83RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Monkey HTTP Daemon Mandril Security Plugin - Security Bypass
The Mandril security plugin in Monkey HTTP Daemon (monkeyd) before 1.5.0 allows remote attackers to bypass access restri
23RISCO
abrir ↗Metasploit600
LibrettoCMS File Manager Arbitary File Upload Vulnerability
LibrettoCMS File Manager Arbitrary File Upload
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy LAN Folder Share 3.2.0.100 - Buffer Overflow
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (applic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co
100RISCO
abrir ↗Exploit-DB
AXIS Media Control 6.2.10.11 - Unsafe ActiveX Method
The AXIS Media Control (AMC) ActiveX control (AxisMediaControlEmb.dll) 6.2.10.11 for AXIS network cameras allows remote
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.