Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP
28RISCO
abrir ↗Exploit-DB
Adobe InDesign CS4 - 'ibfs32.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SquirrelMail PGP Plugin - Command Execution (SMTP) (Metasploit)
The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via s
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Skype 4.2.0.169 - 'wab32.dll' DLL Hijacking
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Thunderbird - 'dwmapi.dll' DLL Hijacking
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 an
28RISCO
abrir ↗Exploit-DB
Microsoft Office Groove 2007 - 'mso.dll' DLL Hijacking
Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a T
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Media Player Classic 6.4.9.1 - 'iacenc.dll' DLL Hijacking
Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to
28RISCO
abrir ↗Metasploit600
ProcessMaker Plugin Upload
ProcessMaker < 3.5.4 Authenticated Plugin Upload RCE
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eureka Email Client 2.2q - ERR Remote Buffer Overflow (Metasploit) (2)
Stack-based buffer overflow in Eureka Email 2.2q allows remote POP3 servers to execute arbitrary code via a long error m
50RISCO
abrir ↗Exploit-DB
Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to e
28RISCO
abrir ↗Exploit-DB
Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attacker
28RISCO
abrir ↗Exploit-DB
Adobe Device Central CS5 - 'qtcf.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions
28RISCO
abrir ↗Exploit-DB
Adobe Photoshop CS2 - 'Wintab32.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Contacts 'wab32res.dll' DLL Hijacking
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP
28RISCO
abrir ↗Exploit-DB
Microsoft Visio 2003 - 'mfc71enu.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse
28RISCO
abrir ↗Exploit-DB
Microsoft Vista - 'fveapi.dll' BitLocker Drive Encryption API Hijacking
Untrusted search path vulnerability in the BitLocker Drive Encryption API, as used in sdclt.exe in Backup Manager in Mic
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx - 'tolog()' Format String (Metasploit) (2)
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RISCO
abrir ↗Exploit-DB
Roxio MyDVD 9 - 'HomeUtils9.dll' DLL Hijacking
Untrusted search path vulnerability in Roxio MyDVD 9 allows local users to gain privileges via a Trojan horse HomeUtils9
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx - 'tolog()' Format String (Metasploit) (1)
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remo
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Services - 'nwapi32.dll' (MS06-066) (Metasploit)
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 al
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Address Book 6.00.2900.5512 - 'wab32res.dll' DLL Hijacking
Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Connection Signup Wizard - 'smmscrpt.dll' DLL Hijacking
Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Ser
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 5.581 - 'wnaspi32.dll' DLL Hijacking
Untrusted search path vulnerability in Nullsoft Winamp 5.581, and probably other versions, allows local users, and possi
23RISCO
abrir ↗Exploit-DB
Adobe Premier Pro CS4 - 'ibfs32.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly r
28RISCO
abrir ↗Exploit-DB
Adobe Illustrator CS4 - 'aires.dll' DLL Hijacking
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Corel PHOTO-PAINT X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gai
23RISCO
abrir ↗Exploit-DB
Roxio Creator DE - 'HomeUtils9.dll' DLL Hijacking
Untrusted search path vulnerability in Roxio Easy Media Creator Home 9.0.136 allows local users to gain privileges via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CorelDRAW X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking
Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gai
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TechSmith Snagit 10 (Build 788) - 'dwmapi.dll' DLL Hijacking
Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remo
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.