Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Boat Classifieds - 'printdetail.asp?Id' SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB
Joomla! Component JE Ajax Event Calendar 1.0.5 - SQL Injection
SQL injection vulnerability in the JE Ajax Event Calendar (com_jeajaxeventcalendar) component 1.0.5 for Joomla! allows r
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 8.0/7.3/7.2 - 'nfs_mount()' Local Privilege Escalation
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2DayBiz Matrimonial Script - SQL Injection
SQL injection vulnerability in customprofile.php in 2daybiz Matrimonial Script allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD - 'mountnfs()' Denial of Service
sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earl
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Texas Imperial Software WFTPD 3.23 - SIZE Overflow (Metasploit)
Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server < 4.01b - LOGIN Buffer Overflow (Metasploit)
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor Universal Agent - Remote Overflow (Metasploit)
Buffer overflow in the UniversalAgent for Computer Associates (CA) BrightStor ARCserve Backup allows remote authenticate
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cornerstone CMS - SQL Injection
SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail SMTPD - AUTH CRAM-MD5 Buffer Overflow (Metasploit)
Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, all
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris Telnet - Remote Authentication Bypass (Metasploit)
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterpr
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Subtitle Translation Wizard 3.0.0 - Overflow (SEH) (PoC)
Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SafeNet SoftRemote - IKE Service Buffer Overflow (Metasploit)
Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion
Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! all
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell Groupwise Messenger Client - Remote Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3 HP1 for Windows allow rem
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ArcServe - Media Service Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Me
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Boat Classifieds - SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP OpenView - Operations OVTrace Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 f
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
mIRC 6.34 - PRIVMSG Handling Stack Buffer Overflow (Metasploit)
Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIV
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
K-Search - SQL Injection / Cross-Site Scripting
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris TelnetD - 'TTYPROMPT' Remote Buffer Overflow (2) (Metasploit)
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GAMSoft TelSrv 1.5 - 'Username' Remote Buffer Overflow (Metasploit)
GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris Sadmind - Command Execution (Metasploit)
The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attack
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Job Search Engine Script - SQL Injection
SQL injection vulnerability in show_search_result.php in 2daybiz Job Search Engine Script allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox/Thunderbird/SeaMonkey - XSLT Integer Overflow
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Video Community portal - SQL Injection / Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attacke
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.