Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
87.899exploits catalogados
40.763CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.463Exploit-DB 24.489GitHub PoC 18.324VulnCheck XDB 10.507Nuclei 4.577Metasploit 3.539✓ só verificadosrecentespopularesrisco
87.899 exploits
Exploit-DB✓ VexDay Proof
Xinha 0.96 - 'spell-check-savedicts.php' Multiple HTML Injection Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SmarterMail 7.3/7.4 - Multiple Vulnerabilities
Directory traversal vulnerability in FileStorageUpload.ashx in SmarterMail 7.1.3876 allows remote attackers to read arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Polic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP < 5.3.6 'OpenSSL' Extension - 'openssl_decrypt' Ciphertext Data Memory Leak Denial of Service
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of ser
28RISCO
abrir ↗Metasploit300
Majordomo2 _list_file_get() Directory Traversal
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allo
60RISCO
abrir ↗Metasploit300
Majordomo2 _list_file_get() Directory Traversal
The _list_file_get function in lib/Majordomo.pm in Majordomo 2 20110203 and earlier allows remote attackers to conduct d
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP < 5.3.6 'OpenSSL' Extension - 'openssl_encrypt' Plaintext Data Memory Leak Denial of Service
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of ser
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KingView 6.5.3 SCADA - ActiveX
Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote att
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kodak InSite 5.5.2 - '/Pages/login.aspx?Language' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kodak InSite 5.5.2 - '/Troubleshooting/DiagnosticReport.asp?HeaderWarning' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell iPrint Client 5.52 - ActiveX Control Buffer Overflow (Metasploit)
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to
50RISCO
abrir ↗Exploit-DB
Quick Polls - Local File Inclusion / Deletion
Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to (1) re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nostromo nhttpd 1.9.3 - Directory Traversal Remote Command Execution
Directory traversal vulnerability in nhttpd (aka Nostromo webserver) before 1.9.4 allows remote attackers to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vTiger CRM 5.0.4 - Local File Inclusion
Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Long Filename Overflow (Metasploit)
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote at
50RISCO
abrir ↗Metasploit300
Foxit PDF Reader 4.2 Javascript File Write
Foxit PDF Reader < 4.3.1.0218 JavaScript File Write
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mail.app - Image Attachment Command Execution (Metasploit)
Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDoub
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mail.app - Image Attachment Command Execution (Metasploit)
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
95RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution
The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, doe
46RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetSupport Manager Agent - Remote Buffer Overflow (Metasploit) (2)
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows
50RISCO
abrir ↗Metasploit600
LotusCMS 3.0 eval() Remote Command Execution
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allo
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Citrix Access Gateway - Command Execution (Metasploit)
The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - fs/eventpoll.c epoll Data Structure File Descriptor Local Denial of Service
fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures withou
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vsftpd 2.3.2 - Denial of Service
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a deni
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - epoll Nested Structures Local Denial of Service
The epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descri
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.37 - Local Kernel Denial of Service (1)
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MA
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark 1.4.3 - NTLMSSP Null Pointer Dereference Denial of Service
epan/dissectors/packet-ntlmssp.c in the NTLMSSP dissector in Wireshark before 1.4.4 allows remote attackers to cause a d
23RISCO
abrir ↗Metasploit300
Wireshark CLDAP Dissector DOS
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in W
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.