Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB
Joomla! Component CamelcityDB 2.2 - SQL Injection
SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SigPlus Pro 3.74 - ActiveX 'LCDWriteString()' Remote Buffer Overflow JIT Spray (ASLR + DEP Bypass)
Stack-based buffer overflow in SigPlus Pro 3.74 ActiveX control allows remote attackers to execute arbitrary code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz Barcode ActiveX Control 3.29 - Remote HeapSpray (Internet Explorer 6/7)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)
Buffer overflow in BarCodeWiz BarCode 3.29 ActiveX control (BarcodeWiz.dll) allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KVIrc 4.0 - '\r' Carriage Return in DCC Handshake Remote Command Execution
The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which al
23RISCO
abrir ↗Metasploit300
WM Downloader 3.1.2.2 Buffer Overflow
WM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File
36RISCO
abrir ↗Exploit-DB
AV Arcade 3 - Cookie Authentication Bypass
SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16,
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hyleos ChemView - ActiveX Control Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos Ch
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component TTVideo 1.0 - SQL Injection
SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nuBuilder 10.04.20 - Local File Inclusion
Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Impact Software AdPeeps - Cross-Site Scripting / HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway CMS 1.4.3.210 - SQL Injection
SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Metasploit600
Symantec System Center Alert Management System (hndlrsvc.exe) Arbitrary Command Execution
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (a
30RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component FreiChat 1.0/2.x - HTML Injection
Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Visites 1.1 RC2 - Remote File Inclusion
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx - 'h_handlepeer()' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
sSMTP 2.62 - 'standardize()' Buffer Overflow
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft DNS RPC Service - 'extractQuotedChar()' TCP Overflow (MS07-029) (Metasploit)
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 200
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TikiWiki jhot - Remote Command Execution (Metasploit)
Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execu
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Remote Command Execution (Metasploit)
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Message Queueing Service - DNS Name Path Overflow (MS07-065) (Metasploit)
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Window
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - ypupdated Command Execution (Metasploit)
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apach
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI FrontPage 'fp30reg.dll' Chunked Overflow (MS03-051) (Metasploit)
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.