Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invali
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Explorer - '.ANI' File Denial of Service
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPwebnews 0.1 - 'iklan.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPwebnews 0.1 - 'index.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPwebnews 0.1 - 'bukutamu.php' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebne
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 'GD' Extension - '.WBMP' File Integer Overflow
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Livor 2.5 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Man Command - -H Flag Local Buffer Overflow
Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wserve HTTP Server 4.6 - Long Directory Name Denial of Service
Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers to cause a denial of ser
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AOL SuperBuddy - ActiveX Control Remote Code Execution (Metasploit)
The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition derefe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TrueCrypt 4.3 - 'setuid' Local Privilege Escalation
TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView 3.99 - Multiple .BMP Denial of Service Vulnerabilities
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ACDSee 9.0 Photo Manager - Multiple '.BMP' Denial of Service Vulnerabilities
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibl
23RISCO
abrir ↗Metasploit300
HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflow
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for M
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyNewsletter 0.6.10 - 'customize.php' Remote File Inclusion
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Mercury Quality Center - Spider90.ocx ProgColor Overflow
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for M
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FastStone Image Viewer 2.9/3.6 - '.bmp' Image Handling Memory Corruption
Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gazi Okul Sitesi 2007 - 'Fotokategori.asp' SQL Injection
SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Universal Generator
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Overflow (Hardware DEP)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Mercury Quality Center 9.0 build 9.1.0.4352 - SQL Execution
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Universal Generator
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Module XFsection 1.07 - 'articleId' Blind SQL Injection
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections (wfsections) 1.07 allows rem
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.