Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Slimpdf Reader 1.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a deni
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Able2Doc and Able2Doc Professional 6.0 - Memory Corruption
Unspecified vulnerability in Investintech.com Able2Extract and Able2Extract Server allows remote attackers to cause a de
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - Object Type Confusion (Metasploit)
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Able2Extract and Able2Extract Server 6.0 - Memory Corruption
Investintech.com SlimPDF Reader does not properly restrict the arguments to unspecified function calls, which allows rem
23RISCO
abrir ↗Metasploit600
SugarCRM unserialize() PHP Code Execution
SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (2)
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lattice Diamond Programmer 1.4.2 - Buffer Overflow (PoC)
Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (1)
Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.gif' Image Processing Heap Overflow
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XnView 1.98.8 - '.PCT' Image Processing Heap Overflow
Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash
23RISCO
abrir ↗Exploit-DB
IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storag
23RISCO
abrir ↗Exploit-DB
IBM System Storage DS Storage Manager Profiler - Multiple Vulnerabilities
SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager
23RISCO
abrir ↗Metasploit500
Adobe Flash Player AVM Verification Logic Array Indexing Code Execution
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
web@all - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)
The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Data Protector Client - EXEC_CMD Remote Code Execution
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that ref
50RISCO
abrir ↗Metasploit600
IBM Lotus Notes Client URL Handler Command Injection
The URL handler in IBM Lotus Notes 8.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a crafted
50RISCO
abrir ↗Metasploit600
Open-FTPD 1.2 Arbitrary File Upload
Open&Compact FTP Server (Open-FTPD) 1.2 and earlier allows remote attackers to bypass authentication by sending (1) LIST
43RISCO
abrir ↗Metasploit600
EZHomeTech EzServer Stack Buffer Overflow Vulnerability
EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command.
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.4.3 - apache_request_headers Function Buffer Overflow (Metasploit)
Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lattice Semiconductor PAC-Designer 6.21 - Symbol Value Buffer Overflow (Metasploit)
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MediaWiki 1.x - 'uselang' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft XML Core Services - MSXML Uninitialized Memory Corruption (MS12-043) (Metasploit)
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacker
100RISCO
abrir ↗Exploit-DB
Wyse - Machine Remote Power Off (Denial of Service) (Metasploit)
Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) th
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Myre Real Estate Mobile 2012 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.30 - Remote Format String Write4
Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unsp
23RISCO
abrir ↗Metasploit600
qdPM v7 Arbitrary PHP File Upload Vulnerability
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)
23RISCO
abrir ↗Exploit-DB
ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution
ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.