Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
WordPress Plugin FCChat Widget 2.2.x - 'upload.php' Arbitrary File Upload
Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload
Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - OLE Object File Handling Remote Code Execution (Metasploit)
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote a
60RISCO
abrir ↗Metasploit300
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
36RISCO
abrir ↗Metasploit600
Java Applet Field Bytecode Verifier Cache Remote Code Execution
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload
Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Struts 2.2.1.1 - Remote Command Execution (Metasploit)
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during
100RISCO
abrir ↗Metasploit600
WordPress Plugin Foxypress uploadify.php Arbitrary Code Execution
FoxyPress <= 0.4.2.1 - Arbitrary File Upload
63RISCO
abrir ↗Metasploit300
Sielco Sistemi Winlog Buffer Overflow 2.07.14 - 2.07.16
Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 al
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Log1 CMS - 'writeInfo()' PHP Code Injection (Metasploit)
Static code injection vulnerability in inc/function.base.php in Ajax File and Image Manager before 1.1, as used in tinym
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GIMP script-fu - Server Buffer Overflow (Metasploit)
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p
60RISCO
abrir ↗Metasploit300
IBM Lotus iNotes dwa85W ActiveX Buffer Overflow
Buffer overflow in the Attachment_Times method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x befo
43RISCO
abrir ↗Exploit-DB
Sony VAIO Wireless Manager 4.0.0.0 - Buffer Overflow
Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wi
28RISCO
abrir ↗Exploit-DB
GIMP 2.6 script-fu < 2.8.0 - Buffer Overflow (PoC)
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p
60RISCO
abrir ↗Metasploit600
Active Collab "chat module" Remote PHP Code Injection Exploit
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple Web Content Management System 1.1 < 1.3 - Multiple SQL Injections
Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MPlayer - '.SAMI' Subtitle File Buffer Overflow (Metasploit)
Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, all
43RISCO
abrir ↗Exploit-DB
WinRadius Server 2009 - Denial of Service
WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Requ
23RISCO
abrir ↗Metasploit600
PHP Volunteer Management System v1.0.2 Arbitrary File Upload Vulnerability
PHP Volunteer Management System 1.0.2 Arbitrary File Upload
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2.8 - Command Execution (Metasploit)
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISCO
abrir ↗Metasploit600
WordPress Asset-Manager PHP File Upload Vulnerability
WordPress Plugin Asset-Manager <= 2.0 PHP File Upload
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Web Gateway 5.0.2 - Local/Remote File Inclusion / Remote Code Execution
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenOffice - OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)
Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial of
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
appRain CMF - Arbitrary '.PHP' File Upload (Metasploit)
Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Mod_Auth_OpenID - Session Stealing
mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service (infinite loop
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - DIAMETER Dissector Denial of Service
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a den
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - Multiple Dissector Denial of Service Vulnerabilities
Multiple integer underflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a de
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.