Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.7 - Input Validation Flaw 'parse_machfile()' Denial of Service
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Siteman 1.1 - User Database Privilege Escalation (2)
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
konversation irc client 0.15 - Multiple Vulnerabilities
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel nam
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Siteman 1.1 - User Database Privilege Escalation (1)
CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NodeManager Professional 2.00 - Remote Buffer Overflow
Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GeoBlog 1.0 - 'viewcat.php' SQL Injection
SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQ
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iTunes - Playlist Parsing Local Buffer Overflow
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)
50RISCO
abrir ↗Metasploit600
AWStats configdir Remote Command Execution
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISCO
abrir ↗Metasploit600
Cacti graph_view.php Remote Command Execution
Cacti graph_view.php RCE via graph_start Parameter Injection
36RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AWStats 6.2 < 6.1 - configdir Command Injection (Metasploit)
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacte
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Exim 4.41 - 'dns_build_reverse' Local Buffer Overflow
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Breed patch #1 - Zero-Length Remote Crash
Breed patch 1 and earlier allows remote attackers to cause a denial of service (application crash) via an empty UDP pack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Improper Token Validation Privilege Escalation
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly vali
23RISCO
abrir ↗Metasploit300
Apple ITunes 4.7 Playlist Buffer Overflow
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Veritas Backup Exec Agent 8.x/9.x - Browser Overflow
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.4.29-rc2 - 'uselib()' Local Privilege Escalation (1)
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.4
23RISCO
abrir ↗Metasploit500
Blue Coat WinProxy Host Header Overflow
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.
50RISCO
abrir ↗Metasploit200
3Com 3CDaemon 2.0 FTP Username Overflow
Buffer overflow in the FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
QwikiWiki - Directory Traversal
Directory traversal vulnerability in index.php in QwikiWiki allows remote attackers to read arbitrary files via a .. (do
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SOLDNER Secret Wars 30830 - Denial of Service
Format string vulnerability in Soldner Secret Wars 30830 and earlier allows remote attackers to cause a denial of servic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - WINS Remote Code Execution
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Ser
35RISCO
abrir ↗Metasploit300
Serv-U FTP Server Buffer Overflow
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.3.7 - 'openlog()' Remote Buffer Overflow
Buffer overflow in openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote at
28RISCO
abrir ↗Metasploit500
Netcat v1.10 NT Stack Buffer Overflow
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netcat 1.1 - '-e' Switch Remote Buffer Overflow
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attack
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer (Windows XP SP2) - HTML Help Control Local Zone Bypass
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics"
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - '.ANI' File Parsing Crash
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Window
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.7-rc3 (Slackware 9.1 / Debian 3.0) - 'sys_chown()' Group Ownership Alteration Privilege Escalation
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported fi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflow
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.