Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.056exploits catalogados
40.804CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.494Exploit-DB 24.489GitHub PoC 18.351VulnCheck XDB 10.605Nuclei 4.578Metasploit 3.539✓ só verificadosrecentespopularesrisco
88.056 exploits
Exploit-DB✓ VexDay Proof
Datemill - 'photo_search.php?st' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web scrip
23RISCO
abrir ↗Metasploit600
Zabbix Agent net.tcp.listen Command Injection
The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote att
43RISCO
abrir ↗Metasploit600
Zabbix Server Arbitrary Command Execution
The node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via
50RISCO
abrir ↗Metasploit600
Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4/2.6 (Fedora 11) - 'sock_sendpage()' Local Privilege Escalation (2)
The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.50 - Heap Overflow / Null Pointer Dereference
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 3.2.3 (Windows x86) - JavaScript 'eval' Remote Denial of Service
Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component BF Survey Pro Free - SQL Injection
SQL injection vulnerability in the updateOnePage function in components/com_bfsurvey_pro/controller.php in BF Survey Pro
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OBOphiX 2.7.0 - 'fonctions_racine.php' Remote File Inclusion
PHP remote file inclusion vulnerability in fonctions_racine.php in OBOphiX 2.7.0 and earlier allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Agoko CMS 0.4 - Remote Command Execution
Unrestricted file upload vulnerability in admintools/editpage-2.php in Agoko CMS 0.4 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component TPDugg 1.1 - Blind SQL Injection
SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Vista/7 - SMB2.0 Negotiate Protocol Request Remote Blue Screen of Death (MS07-063)
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Audio Lib Player - '.m3u' Local Buffer Overflow (SEH)
Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SIDVault 2.0e - Windows Universal Buffer Overflow (SEH)
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0f
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pidgin MSN 2.5.8 - Remote Code Execution
Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protoco
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPNagios 1.2.0 - 'menu.php' Local File Inclusion
Directory traversal vulnerability in menu.php in phpNagios 1.2.0 allows remote attackers to include and execute arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WS_FTP 12 Professional - Remote Format String (PoC)
Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Media Player Classic 6.4.9 - '.mid' Integer Overflow (PoC)
Integer overflow in Media Player Classic 6.4.9 allows user-assisted remote attackers to cause a denial of service (appli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
The Rat CMS Alpha 2 - Arbitrary File Upload
Unrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Model Agency Manager Pro - 'user_id' SQL Injection
Multiple SQL injection vulnerabilities in Model Agency Manager PRO (formerly Modeling Agency Content Management Script)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpAuction 3.2 - 'lan' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in PHPAuction 3.2 allows remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.50 - Heap Overflow / Null Pointer Dereference
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, mi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pidgin MSN 2.5.8 - Remote Code Execution
The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FTPShell Client 4.1 RC2 - Remote Buffer Overflow (Universal)
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomloc 1.0 - 'id' SQL Injection
SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arb
23RISCO
abrir ↗Metasploit400
MS09-050 Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Omnistar Recruiting - 'resume_register.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in users/resume_register.php in Omnistar Recruiting allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component com_zoom - 'catid' Blind SQL Injection
SQL injection vulnerability in the Mike de Boer zoom (com_zoom) component 2.0 for Mambo allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZeroBoard 4.1 pl7 - 'now_connect()' Remote Code Execution
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OtsTurntables 1.00.027 - '.m3u' / '.ofl' Universal Local Buffer Overflow (SEH)
Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a lon
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.