Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow (2)
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARC
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5.1/2.6/7/8 rlogin (SPARC) - '/bin/login' Remote Buffer Overflow
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel < 2.6.7-rc3 (Slackware 9.1 / Debian 3.0) - 'sys_chown()' Group Ownership Alteration Privilege Escalation
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported fi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8/9 CDE LibDTHelp - Local Buffer Overflow (1)
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARC
23RISCO
abrir ↗Metasploit200
SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash)
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SHOUTcast DNAS/Linux 1.9.4 - Format String Remote Overflow
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash)
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wirtualna Polska WPKontakt 3.0.1 - Remote Script Execution
Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP/2000/2003 - 'winhlp32' Phrase Integer Overflow
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (3)
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (2)
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyChat 0.14.5 - Remote Improper File Permissions
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
2BGal 2.5.1 - SQL Injection
SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Snort 2.1/2.2 - DecodeTCPOptions Remote Denial of Service (1)
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbo
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIX 4.3/5.1 < 5.3 - 'lsmcode' Execution Privilege Escalation
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privile
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2)
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ultrix 4.5/MIPS - dxterm 0 Local Buffer Overflow
Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5.x - 'Diag' Local Privilege Escalation
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd
23RISCO
abrir ↗Metasploit200
CA BrightStor Discovery Service Stack Buffer Overflow
Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attac
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AIX 5.1 < 5.3 - paginit Local Stack Overflow
Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kayako eSupport 2.x - 'index.php' Knowledgebase Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file doe
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Kayako eSupport 2.x - Ticket System Multiple SQL Injections
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gadu-Gadu 6.0 - URL Parser JavaScript Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
O3Read 0.0.3 - HTML Parser Buffer Overflow
Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary cod
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RTF2LATEX2E 1.0 - Remote Stack Buffer Overflow
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitr
28RISCO
abrir ↗Metasploit200
Veritas Backup Exec Name Service Overflow
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinRAR 3.4.1 - Corrupt '.ZIP' File
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XLReader 0.9 - Remote Client-Side Buffer Overflow
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Xine-Lib 0.9/1 - Remote Client-Side Buffer Overflow
Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to e
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.