Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 (Windows 2003) - Remote Buffer Overflow
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ngIRCd 0.8.2 - Remote Format String
Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Newspost 2.1 - 'socket_getline()' Remote Buffer Overflow (2)
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to exe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Painkiller 1.35 - in-game cd-key alpha-numeric Buffer Overflow (PoC)
Buffer overflow in Painkiller 1.35 and earlier, and possibly other versions before 1.61, allows remote authenticated use
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - '.printer' ISAPI Extension Buffer Overflow (3)
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Savant Web Server 3.1 - Remote Buffer Overflow (1)
Buffer overflow in Savant Web Server 3.1 allows remote attackers to execute arbitrary code via a long HTTP request.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PostgreSQL 7.x - Multiple Vulnerabilities
Buffer overflow in gram.y for PostgreSQL 8.0.0 and earlier may allow attackers to execute arbitrary code via a large num
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Newspost 2.0/2.1 - Remote Buffer Overflow
Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to exe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CitrusDB 0.1/0.2/0.3 Credit Card Data - Remote Information Disclosure
CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xpand Rally 1.0.0.0 (Server/Clients) - Crash
Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation
ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vim - 'mch_expand_wildcards()' Heap Buffer Overflow
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebWasher Classic 2.2/2.3 - HTTP CONNECT Unauthorized Access
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IceWarp Web Mail 5.3 - login.html 'Username' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ngIRCd 0.6/0.7/0.8 - Remote Buffer Overflow
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IceWarp Web Mail 5.3 - 'accountsettings_add.html?accountid' Cross-Site Scripting
Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
War FTP Daemon 1.8 - Remote Denial of Service
WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service (access
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Winmail Server 4.0 (Build 1112) - 'upload.php' Traversal Arbitrary File Upload
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4 - 'uselib()' Local Privilege Escalation (2)
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.4
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Magic Winmail Server 4.0 (Build 1112) - 'download.php' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Berlios GPSD 2.7.x - Remote Format String
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MercuryBoard 1.1 - Multiple Input Validation Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NullSoft Winamp 5.0.x - Variant 'IN_CDDA.dll' Remote Buffer Overflow (PoC)
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - '.ANI' Downloader (MS05-002)
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Window
35RISCO
abrir ↗Metasploit400
URSoft W32Dasm Disassembler Function Buffer Overflow
Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code v
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.7 - 'mRouter' Local Privilege Escalation
Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - '.ANI' Universal (MS05-002)
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Window
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Golden FTP Server 2.02b - Remote Buffer Overflow
Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long R
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.