Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
SWFupload - 'movieName' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
specview 2.5 build 853 - Directory Traversal
SpecView Directory Traversal
28RISCO
abrir ↗Metasploit600
Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RISCO
abrir ↗Metasploit600
Basilic 1.5.14 diff.php Arbitrary Command Execution
Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Openfire Server 3.6.0a - Admin Console Authentication Bypass (Metasploit)
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows rem
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime - TeXML Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbit
43RISCO
abrir ↗Metasploit600
Umbraco CMS Remote Command Execution
Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA befor
28RISCO
abrir ↗Exploit-DB
Zend Framework < 2.0.0 beta4 < 1.12 RC1 < 1.11.11 - Local File Disclosure
Zend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement clas
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
TCPIPS_Story.dll in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow
The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.16 - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA bef
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM CE 6.3.1 - 'Unserialize()' PHP Code Execution (Metasploit)
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Chrome 19.0.1084.52 - 'metro_driver.dll' DLL Loading Arbitrary Code Execution
Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain priv
23RISCO
abrir ↗Metasploit600
KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 10 - Extended M3U Stack Buffer Overflow (Metasploit)
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a de
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - Object Type Confusion (Metasploit)
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Parodia 6.8 - 'employer-profile.asp' SQL Injection
SQL injection vulnerability in Parodia before 6.809 allows remote attackers to execute arbitrary SQL commands via unspec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kingview Touchview 6.53 - Multiple Heap Overflow Vulnerabilities
Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted p
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.