Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
88.871exploits catalogados
40.961CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.571Exploit-DB 24.489GitHub PoC 18.446VulnCheck XDB 11.241Nuclei 4.584Metasploit 3.540✓ só verificadosrecentespopularesrisco
88.871 exploits
Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (2)
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 - 'Session.Save_Path()' TMPDIR open_basedir Restriction Bypass
PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR de
23RISCO
abrir ↗Metasploit500
Windows ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attack
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.5/4.4.6 - 'session_decode()' Double-Free (PoC)
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (1)
Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.20 with DCCP Support - Memory Disclosure (1)
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.4.4 - 'Zip_Entry_Read()' Integer Overflow
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Recordset Double-Free Memory (MS07-009)
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Easy File Sharing FTP Server 2.0 (Windows 2000 SP4) - 'PASS' Remote Overflow
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fizzle 0.5 - RSS Feed HTML Injection
Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mephisto Blog 0.7.3 - Search Function Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject arbitrary web script or HTM
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - IPv6_SockGlue.c Null Pointer Dereference Denial of Service
The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CcCounter 2.0 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Frontbase 4.2.7 (Windows) - Remote Buffer Overflow
Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privil
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to exec
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WarFTP 1.65 - 'USER' Remote Buffer Overflow
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of s
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP < 4.4.5/5.2.1 - '_SESSION unset()' Local Overflow
The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session vari
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free File Hosting System 1.1 - 'contact.php?AD_BODY_TEMP' Remote File Inclusion
PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercury/32 Mail Server 4.0.1 - 'LOGIN' Remote IMAP Stack Buffer Overflow
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote att
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Vista - Windows Mail Local File Execution
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a lin
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MzK Blog - 'Katgoster.asp' SQL Injection
SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 5.2.1 - 'Unserialize()' Local Information Leak
PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a seriali
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote att
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
eWebquiz 8 - 'eWebQuiz.asp' SQL Injection
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
dproxy 0.5 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla FireFox 1.5.x/2.0 - FTP PASV Port-Scanning
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to for
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.