Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525VulnCheck XDB 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Metasploit300
RealVNC NULL Authentication Mode Bypass
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pixaria PopPhoto 3.5.4 - 'CFG[popphoto_base_path]' Remote File Inclusion
PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Stu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Bypass (Metasploit)
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PuTTy.exe 0.53 - Validation Remote Buffer Overflow (Metasploit)
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Applet - Font.createFont Remote Denial of Service
Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Confixx 3.0/3.1 - 'index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP Script Tools PSY Auction - 'email_request.php?user_id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DeluxeBB 1.06 - 'name' SQL Injection (mq=off)
SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPODP 1.5 - 'ODP.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
freeSSHd 1.0.9 - Key Exchange Algorithm Buffer Overflow
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
Stack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp in Outgun 1.0.3 bot 2
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to ca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Empire 4.3.2 - 'strncat' Denial of Service
The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application cr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a larg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
outgun 1.0.3 bot 2 - Multiple Vulnerabilities
The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
raydium svn 309 - Multiple Vulnerabilities
The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'index.php?rep' Traversal Arbitrary Directory Listing
Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'affich.php?image' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gphotos 1.4/1.5 - 'diapo.php?rep' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Metasploit200
FreeFTPd 1.0.10 Key Exchange Algorithm String Buffer Overflow
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISCO
abrir ↗Metasploit200
FreeSSHd 1.0.9 Key Exchange Algorithm String Buffer Overflow
Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produc
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch WhatsUp Professional 2006 - '/NmConsole/Navigation.asp?sDeviceView' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Foing 0.7.0 - 'phpBB' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow r
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.