Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Metasploit600
Zenturi ProgramChecker ActiveX Control Arbitrary File Download
Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UebiMiau 2.7.10 - '/demo/pop3/error.php?selected_theme' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UebiMiau 2.7.10 - '/demo/pop3/error.php' Multiple Full Path Disclosures
Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CPCommerce 1.1 - 'manufacturer.php' SQL Injection
SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DGNews 1.5.1/2.1 - 'news.php' SQL Injection
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (1)
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mutt 1.4.2 - Mutt_Gecos_Name Function Local Buffer Overflow
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DGNews 2.1 - 'footer.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DGNews 2.1 - 'NewsID' SQL Injection
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (2)
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 2.0.58 mod_rewrite (Windows 2003) - Remote Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Interne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpPgAdmin 4.1.1 - 'Redirect.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpPgAdmin 3.5 to 4.1.1, and possibly 4.1.2, allows remote attackers to inje
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation
The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNUTurk - 'Mods.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pligg CMS 9.5 - Reset Forgotten Password Security Bypass
login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BoastMachine 3.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ruby on Rails 1.2.3 To_JSON - Script Injection
Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before ed
23RISCO
abrir ↗Metasploit200
Mac OS X mDNSResponder UPnP Location Overflow
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of servic
50RISCO
abrir ↗Metasploit500
UltraISO CUE File Parsing Buffer Overflow
Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LeadTools Raster Dialog File Object - ActiveX Remote Buffer Overflow (PoC)
Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dart Communications PowerTCP - Service Control Remote Buffer Overflow
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Interne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - VFat Compat IOCTLS Local Denial of Service
The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ASP-Nuke 2.0.7 - 'news.asp' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Office 2000 (OUACTRL.OCX 1.0.1.9) - Remote Denial of Service
Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (O
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco CallManager 4.1 - Search Form Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other dom
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WYYS 1.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpPgAdmin 4.1.1 - 'SQLEDIT.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MagicISO 5.4 (build239) - '.cue' File Local Buffer Overflow
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.