Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
XM Easy Personal FTP Server 5.30 - Remote Format String Write4
Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unsp
23RISCO
abrir ↗Exploit-DB
Adobe Illustrator CS5.5 - Memory Corruption
Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption)
28RISCO
abrir ↗Exploit-DB
ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution
ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh
28RISCO
abrir ↗Metasploit600
qdPM v7 Arbitrary PHP File Upload Vulnerability
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 BIG-IP - SSH Private Key Exposure (Metasploit)
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a de
28RISCO
abrir ↗Metasploit400
MS12-043 Microsoft XML Core Services MSXML Uninitialized Memory Corruption
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attacker
100RISCO
abrir ↗Metasploit300
MS12-037 Microsoft Internet Explorer Same ID Property Deleted Object Handling Memory Corruption
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
50RISCO
abrir ↗Metasploit500
FreeBSD Intel SYSRET Privilege Escalation
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and
50RISCO
abrir ↗Metasploit300
MS12-037 Microsoft Internet Explorer Fixed Table Col Span Heap Overflow
Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.8 - 'ipchange.php' Command Injection (Metasploit)
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 BIG-IP - Authentication Bypass
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISCO
abrir ↗Metasploit300
Free Float FTP Server USER Command Buffer Overflow
FreeFloat FTP Server USER Command Buffer Overflow
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MySQL - Authentication Bypass
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload
WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
F5 BIG-IP - Authentication Bypass (PoC)
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office - ClickOnce Unsafe Object Package Handling (MS12-005) (Metasploit)
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Se
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BMC Identity Management - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite
23RISCO
abrir ↗Metasploit600
F5 BIG-IP SSH Private Key Exposure
F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.8 - Arbitrary '.PHP' File Upload (Metasploit)
The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to u
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tom Sawyer Software GET Extension Factory - Remote Code Execution (Metasploit)
Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.2
50RISCO
abrir ↗Metasploit300
MySQL Authentication Bypass Password Dump
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin NewsLetter 1.5 - Remote File Disclosure
Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attacke
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 th
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sielco Sistemi Winlog 2.07.14 - Remote Buffer Overflow (Metasploit)
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i viewer - Multiple ActiveX 'BackupToAvi()' Remote Overflows (Metasploit)
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows re
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin RBX Gallery 2.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attacke
28RISCO
abrir ↗Metasploit400
ComSndFTP v1.3.7 Beta USER Format String (Write4) Vulnerability
ComSndFTP v1.3.7 Beta USER Format String RCE
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lattice Semiconductor PAC-Designer 6.21 - '.PAC' Local Overflow
Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary
43RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.