Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.464exploits catalogados
40.695CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.426Exploit-DB 24.489GitHub PoC 18.182VulnCheck XDB 10.251Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.464 exploits
Exploit-DB
diafan.cms 4.3 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)
Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted r
23RISCO
abrir ↗Metasploit300
HP OpenView NNM nnmRptConfig.exe schdParams Buffer Overflow
Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote at
60RISCO
abrir ↗Metasploit300
HP OpenView NNM nnmRptConfig nameParams Buffer Overflow
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Common Control Library 'Comctl32' Heap Overflow (MS10-081)
Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TinyBB 1.2 - SQL Injection
SQL injection vulnerability in inc/tinybb-settings.php in tinyBB 1.2, when magic_quotes_gpc is disabled, allows remote a
23RISCO
abrir ↗Exploit-DB
Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (pa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss JMX - Console Beanshell Deployer WAR Upload and Deployment (Metasploit)
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KingView 6.5.3 - SCADA HMI Heap Overflow
Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary co
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.2 rc3 < 1.3.3b (Linux) - Telnet IAC Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow rem
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.2 < 1.3.0 (Linux) - 'sreplace' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably auth
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport Manager Agent - Remote Buffer Overflow (1)
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows
50RISCO
abrir ↗Metasploit200
NetSupport Manager Agent Remote Buffer Overflow
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fonality trixbox CE 2.6.1 - 'langChoice' Local File Inclusion (Metasploit)
Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
axdcms-0.1.1 - Local File Inclusion
Directory traversal vulnerability in modules/profile/user.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS/PWS - CGI Filename Double Decode Command Execution (MS01-026) (Metasploit)
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encodi
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.6.7 - _Marshaled_pUnk Code Execution (Metasploit)
The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions all
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Signed Applet Social Engineering - Code Execution (Metasploit)
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java - Runtime New Plugin docbase Buffer Overflow (Metasploit)
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows r
60RISCO
abrir ↗Metasploit300
HP Data Protector Manager RDS DOS
The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash)
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow
Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions;
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple QuickTime 7.6.6 - Invalid SMIL URI Buffer Overflow (Metasploit)
Stack-based buffer overflow in the error-logging functionality in Apple QuickTime before 7.6.7 on Windows allows remote
50RISCO
abrir ↗Exploit-DB
Zwii 2.1.1 - Remote File Inclusion
Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magic_quotes_gpc is disabled and register_glo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - mDNSResponder UPnP Location Overflow (Metasploit)
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of servic
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service
The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash)
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow
Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly othe
50RISCO
abrir ↗Exploit-DB
GNU libc/regcomp(3) - Multiple Vulnerabilities
Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3,
35RISCO
abrir ↗Exploit-DB
GNU libc/regcomp(3) - Multiple Vulnerabilities
The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows c
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! 1.0.x - 'ordering' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attacke
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.