Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.013exploits catalogados
41.057CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.648Exploit-DB 24.490GitHub PoC 18.462VulnCheck XDB 11.272Nuclei 4.601Metasploit 3.540✓ só verificadosrecentespopularesrisco
89.013 exploits
Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.x - XML Handler Race Condition Memory Corruption
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3)
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allow
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Libmusicbrainz 2.0.2/2.1.x - Multiple Buffer Overflow Vulnerabilities
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 840
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin WP-DB Backup 1.6/1.7 - 'edit.php' Directory Traversal
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ImageMagick 6.x - '.SGI' Image File Remote Heap Buffer Overflow
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cau
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux-HA Heartbeat 2.0.6 - Remote Denial of Service
The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 help - Multiple Vulnerabilities
Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mozilla Firefox 1.0.x - JavaScript Handler Race Condition Memory Corruption
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (c
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPCheck Server Monitor 5.x - Directory Traversal
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Panda ActiveScan 5.53 - 'Ascan_6.asp' ActiveX Control Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mafia Moblog 6 - 'Big.php' Remote File Inclusion
PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component Remository 3.25 - Remote File Inclusion
PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and ea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
YaBBSE 1.x - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenMPT 1.17.02.43 - Multiple Remote Buffer Overflows (PoC)
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote a
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VWar 1.50 R14 - 'online.php' SQL Injection
Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
miniBloggie 1.0 - 'Fname' Remote File Inclusion
PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion
PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple One File Guestbook 1.0 - Security Bypass
Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AlsaPlayer 0.99.x - Multiple Buffer Overflow Vulnerabilities
Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of se
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ArcSoft Mms Composer 1.5.5/2.0 - Multiple Vulnerabilities
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 2.2.2 - CGI Script Source Code Information Disclosure
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that co
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Tagger Luxury Edition - 'BBCodeFile' Remote File Inclusion
Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView 3.98 - '.ANI' Image File Denial of Service
IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a craf
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XennoBB 1.0.5/1.0.6/2.1/2.2 - 'profile.php' Directory Traversal
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Visual Studio COM Object Instantiation Denial of Service
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execut
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Barracuda Spam Firewall 3.3.03.053 - Remote Code Execution (2)
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute comm
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cwfm 0.9.1 - 'Language' Remote File Inclusion
PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and po
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.