Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.168exploits catalogados
40.553CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.327Exploit-DB 24.488GitHub PoC 18.080VulnCheck XDB 10.169Nuclei 4.567Metasploit 3.537✓ só verificadosrecentespopularesrisco
87.168 exploits
Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
The ConnectDDNS method in the (1) STWConfigNVR 1.1.13.15 and (2) STWConfig 1.1.14.13 ActiveX controls in Samsung NET-i v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung NET-i ware 1.37 - Multiple Vulnerabilities
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RISCO
abrir ↗Metasploit300
Samsung NET-i Viewer Multiple ActiveX BackupToAvi() Remote Overflow
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - ActionScript Launch Command Execution (Metasploit)
Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TFTP Server 1.4 - ST WRQ Buffer Overflow (Metasploit)
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or ex
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before
35RISCO
abrir ↗Exploit-DB
VideoLAN VLC Media Player 2.0.1 - '.mp4' Crash (PoC)
VideoLAN VLC media player 2.0.1 allows remote attackers to cause a denial of service (divide-by-zero error and applicati
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow An
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service (crash) via a long
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samsung D6000 TV - Multiple Vulnerabilities
The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service (continuous restart
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_global
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and pos
23RISCO
abrir ↗Exploit-DB
Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in cgi-bin/scrut_fa_exclusions.cgi in Plixer International Scrutinizer NetFlow
23RISCO
abrir ↗Metasploit300
Oracle AutoVue ActiveX Control SetMarkupMode Buffer Overflow
Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows rem
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redire
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Metasploit300
Oracle TNS Listener Checker
The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.
40RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.5 - 'login' HTML Injection
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acuity CMS 2.6.2 - 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V-CMS - Arbitrary '.PHP' File Upload / Execution (Metasploit)
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.