Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hastymail 2.1.1 RC1 - Command Injection (Metasploit)
Hastymail2 2.1.1 before RC2 allows remote attackers to execute arbitrary commands via the (1) rs or (2) rsargs[] paramet
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WaveSurfer 1.8.8p4 - Memory Corruption (PoC)
Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kajona - 'getAllPassedParams()' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Java Applet - Field Bytecode Verifier Cache Remote Code Execution (Metasploit)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AdminStudio - 'LaunchHelp.dll' ActiveX Arbitrary Code Execution (Metasploit)
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in Laun
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebsitePanel - 'ReturnUrl' Open Redirection
Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 allows remote attackers to redirect users t
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Basilic 1.5.14 - 'diff.php' Arbitrary Command Execution (Metasploit)
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RISCO
abrir ↗Metasploit300
HP Operations Agent Opcode coda.exe 0x8c Buffer Overflow
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗Metasploit300
HP Operations Agent Opcode coda.exe 0x34 Buffer Overflow
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution (Metasploit)
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISCO
abrir ↗Metasploit600
EGallery PHP File Upload Vulnerability
EGallery 1.2 Arbitrary PHP File Upload
63RISCO
abrir ↗Metasploit600
Sflog! CMS 1.0 Arbitrary File Upload Vulnerability
Sflog! CMS 1.0 Arbitrary File Upload RCE
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Sling - Denial of Service
The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling do
28RISCO
abrir ↗Exploit-DB
Webmatic 3.1.1 - Blind SQL Injection
SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.24 - 'fs/eventpoll.c' Local Denial of Service
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in E
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Rational ClearQuest CQOle - Remote Code Execution (Metasploit)
Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 bef
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (
23RISCO
abrir ↗Metasploit300
ALLMediaServer 0.8 Buffer Overflow
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow
50RISCO
abrir ↗Metasploit600
SPIP connect Parameter PHP Injection
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, all
23RISCO
abrir ↗Metasploit600
Tiki Wiki unserialize() PHP Code Execution
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted
50RISCO
abrir ↗Metasploit600
Wordpress Front-end Editor File Upload
Front-end Editor < 2.3 - Arbitrary File Upload
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
gnome-terminal (vte) VteTerminal - Escape Sequence Parsing Remote Denial of Service
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (lo
28RISCO
abrir ↗Exploit-DB
WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attacke
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Data Protector - Create New Folder Buffer Overflow (Metasploit)
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView JPEG2000 4.3.2.0 - jp2 Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute a
50RISCO
abrir ↗Exploit-DB
GIMP 2.8.0 - '.FIT' File Format Denial of Service
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
28RISCO
abrir ↗Exploit-DB
IrfanView JLS Formats PlugIn - Heap Overflow
Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns be
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.