Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.054exploits catalogados
40.803CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.349VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.054 exploits
Exploit-DB✓ VexDay Proof
America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'inotify_init()' Memory Leak Local Denial of Service
Memory leak in the inotify_init1 function in fs/notify/inotify/inotify_user.c in the Linux kernel before 2.6.37 allows l
23RISCO
abrir ↗Exploit-DB
Free Simple Software - SQL Injection
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec AppStream LaunchObj - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 d
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Zinf Audio Player 2.2.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cain & Abel 4.9.24 - RDP Buffer Overflow (Metasploit)
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier,
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Visual Studio - Msmask32.ocx ActiveX Buffer Overflow (MS08-070) (Metasploit)
Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions befo
50RISCO
abrir ↗Metasploit500
Xion Audio Player 1.0.126 Unicode Stack Buffer Overflow
Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PoPToP - Negative Read Overflow (Metasploit)
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RISCO
abrir ↗Exploit-DB
AuraCMS 1.62 - 'pfd.php' SQL Injection
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 an
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allow
23RISCO
abrir ↗Exploit-DB
S_CMS 2.5 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RISCO
abrir ↗Exploit-DB
S_CMS 2.5 - Multiple Vulnerabilities
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jimtawl 1.0.2 - Local File Inclusion
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RISCO
abrir ↗Exploit-DB
DVD Rental Software - SQL Injection
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (2)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (1)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISCO
abrir ↗Metasploit500
DATAC RealWin SCADA Server SCPC_TXTEVENT Buffer Overflow
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISCO
abrir ↗Metasploit600
SystemTap MODPROBE_OPTIONS Privilege Escalation
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allow
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/advanced/content.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISCO
abrir ↗Metasploit300
Novell iPrint Client ActiveX Control Buffer Overflow
Stack-based buffer overflow in an ActiveX control in ienipp.ocx in Novell iPrint Client 5.52 allows remote attackers to
50RISCO
abrir ↗Metasploit600
CakePHP Cache Corruption Code Execution
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows re
50RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.