Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.149exploits catalogados
40.888CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.559Exploit-DB 24.489GitHub PoC 18.372VulnCheck XDB 10.605Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.149 exploits
Exploit-DB✓ VexDay Proof
Media Commands - '.m3u' Local Overwrite (SEH)
Multiple heap-based buffer overflows in Media Commands 1.0 allow remote attackers to execute arbitrary code or cause a d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
djbdns 1.05 - Long Response Packet Remote Cache Poisoning
The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Irokez Blog 0.7.3.2 - Multiple Input Validation Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, al
23RISCO
abrir ↗Metasploit300
POP Peeper v3.4 DATE Buffer Overflow
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RISCO
abrir ↗Metasploit300
POP Peeper v3.4 UIDL Buffer Overflow
Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSC 0.11.x - PKCS#11 Implementation Unauthorized Access
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data obj
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere Application Server 6.1/7.0 - Administrative Console Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 bef
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wesnoth 1.x - PythonAI Remote Code Execution
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute ar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pPIM 1.0 - Multiple Vulnerabilities
Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pPIM 1.0 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - Cloned Process 'CLONE_PARENT' Local Origin Validation
The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent pr
23RISCO
abrir ↗Metasploit600
ContentKeeper Web Remote Command Execution
ContentKeeper Web Appliance < 125.10 RCE via mimencode
63RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pPIM 1.0 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pPIM 1.0 - Multiple Vulnerabilities
Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 4 - 'feeds:' URI Null Pointer Dereference Remote Denial of Service
Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and appl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
pPIM 1.0 - Multiple Vulnerabilities
changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative au
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player 9/10 - Invalid Object Reference Remote Code Execution
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed obje
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magento 1.2 - '/app/code/core/Mage/Adminhtml/controllers/IndexController.php?email' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magento 1.2 - 'downloader/index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magento 1.2 - '/app/code/core/Mage/Admin/Model/Session.php?login['Username']' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Magento 1.2.0 and 1.2.1.1 allow remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! / Mambo Component gigCalendar 1.0 - 'banddetails.php' SQL Injection
Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_q
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - 'sock.c' SO_BSDCOMPAT Option Information Disclosure
The sock_getsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain struct
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption (MS09-002)
Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the
35RISCO
abrir ↗Metasploit400
Adobe JBIG2Decode Memory Corruption
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra
60RISCO
abrir ↗Metasploit400
Adobe JBIG2Decode Heap Corruption
Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitra
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TPTEST 3.1.7 - Stack Buffer Overflow (PoC)
Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Enomaly ECP / Enomalism < 2.2.1 - Multiple Local Vulnerabilities
Argument injection vulnerability in Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows lo
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.