Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
Exploit-DB✓ VexDay Proof
Kodak InSite 5.5.2 - '/Pages/login.aspx?Language' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client 5.52 - ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KingView 6.5.3 SCADA - ActiveX
Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote att
35RISCO
abrir ↗Exploit-DB
Quick Polls - Local File Inclusion / Deletion
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mail.app - Image Attachment Command Execution (Metasploit)
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Long Filename Overflow (Metasploit)
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vTiger CRM 5.0.4 - Local File Inclusion
Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary
23RISCO
abrir ↗Metasploit300
Foxit PDF Reader 4.2 Javascript File Write
Foxit PDF Reader < 4.3.1.0218 JavaScript File Write
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mail.app - Image Attachment Command Execution (Metasploit)
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDoub
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution
The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, doe
46RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Citrix Access Gateway - Command Execution (Metasploit)
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and
43RISCO
abrir ↗Metasploit600
LotusCMS 3.0 eval() Remote Command Execution
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport Manager Agent - Remote Buffer Overflow (Metasploit) (2)
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vsftpd 2.3.2 - Denial of Service
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a deni
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Local Kernel Denial of Service (1)
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MA
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures withou
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - epoll Nested Structures Local Denial of Service
The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.4.3 - NTLMSSP Null Pointer Dereference Denial of Service
epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, whic
23RISCO
abrir ↗Metasploit300
Wireshark CLDAP Dissector DOS
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in W
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 'Exif' Extension - 'exif_read_data()' Remote Denial of Service
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EMC Replication Manager < 5.3 - Command Execution (Metasploit)
The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x
50RISCO
abrir ↗Exploit-DB
GNU glibc < 2.12.2 - 'fnmatch()' Stack Corruption
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to ex
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Logwatch Log File - Special Characters Privilege Escalation
logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log fi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Netware - RPC XNFS xdrDecodeString
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of s
28RISCO
abrir ↗Exploit-DB
WordPress Plugin Forum Server 1.6.5 - SQL Injection
Multiple SQL injection vulnerabilities in VastHTML Forum Server (aka ForumPress) plugin 1.6.1 and 1.6.5 for WordPress al
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CesarFTP 0.99g - 'MKD' Remote Buffer Overflow (Metasploit) (2)
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applicat
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.