Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB
IBM solidDB 6.5.0.3 - Denial of Service
Stack consumption vulnerability in solid.exe in IBM solidDB 6.5.0.3 and earlier allows remote attackers to cause a denia
23RISCO
abrir ↗Metasploit500
DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISCO
abrir ↗Metasploit500
DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISCO
abrir ↗Exploit-DB
IBM solidDB 6.5.0.3 - Denial of Service
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon recei
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DATAC RealWin SCADA Server 2.0 (Build 6.1.8.10) - Buffer Overflow
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 5.0 - bin/login Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 5.0 - '/bin/view?rev' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 3.5.10/3.6.6 - 'WMP' Memory Corruption Using Popups
Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action, w
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows r
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Solaris - 'su' Crash
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Winamp 5.5.8.2985 - Multiple Buffer Overflows
Buffer overflow in the in_mod plugin in Winamp before 5.6 allows remote attackers to have an unspecified impact via vect
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jstore - 'Controller' Local File Inclusion
Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! allows remote attackers to read arbitrary
43RISCO
abrir ↗Metasploit300
Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SET
Unspecified vulnerability in the Change Data Capture component in Oracle Database Server 10.1.0.5, 10.2.0.4, 11.1.0.7, a
18RISCO
abrir ↗Metasploit400
FTPGetter Standard v3.55.0.05 Stack Buffer Overflow (PWD)
FTPGetter Standard v.5.97.0.177 allows remote code execution when a user initiates an FTP connection to an attacker-cont
50RISCO
abrir ↗Metasploit600
Oracle VM Server Virtual Server Agent Command Injection
Unspecified vulnerability in the OracleVM component in Oracle VM 2.2.1 allows remote authenticated users to affect confi
50RISCO
abrir ↗Metasploit400
FileWrangler 5.30 Stack Buffer Overflow
FileWrangler <= 5.30 Stack Buffer Overflow
36RISCO
abrir ↗Metasploit400
AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)
AASync.com AASync Stack-based Buffer Overflow
18RISCO
abrir ↗Metasploit400
32bit FTP Client Stack Buffer Overflow
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a
43RISCO
abrir ↗Metasploit600
Sun Java Web Start BasicServiceImpl Code Execution
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote
60RISCO
abrir ↗Metasploit300
Windows Escalate NtUserLoadKeyboardLayoutEx Privilege Escalation
The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during
43RISCO
abrir ↗Metasploit500
Sun Java Runtime New Plugin docbase Buffer Overflow
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows r
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Fusion Middleware 10.1.2/10.1.3 - BPEL Console Cross-Site Scripting
Unspecified vulnerability in the BPEL Console component in Oracle Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0 allows rem
23RISCO
abrir ↗Metasploit400
FTP Synchronizer Professional 4.0.73.274 Stack Buffer Overflow
FTP Synchronizer Professional <= 4.0.73.274 Stack Buffer Overflow
36RISCO
abrir ↗Metasploit400
Gekko Manager FTP Client Stack Buffer Overflow
Gekko Manager FTP Client <= 0.77 Stack Buffer Overflow
36RISCO
abrir ↗Metasploit400
Odin Secure FTP 4.1 Stack Buffer Overflow (LIST)
Odin Secure FTP <= 4.1 Stack Buffer Overflow via LIST Response
36RISCO
abrir ↗Metasploit400
FTPShell 5.1 Stack Buffer Overflow
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP serv
50RISCO
abrir ↗Metasploit400
Seagull FTP v3.3 Build 409 Stack Buffer Overflow
Seagull FTP v3.3 Build 409 Stack Buffer Overflow
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView Network Node Manager (OV NNM) 7.53/7.51 - 'OVAS.exe' Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.