Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Star Wars Battlefront 1.1 - Fake Players Denial of Service
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (applicat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KorWeblog 1.6.2 - Remote Directory Listing
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Open DC Hub 0.7.14 - Remote Buffer Overflow
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jabber Server 2.0 - Multiple Remote Buffer Overflow Vulnerabilities
Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a deni
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Soldier of Fortune II 1.3 Server/Client - Denial of Service
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (ser
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 1.x/2.0 Module - Traversal Arbitrary File Access
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Prozilla 1.3.6 - Remote Stack Overflow
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in Pr
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SugarCRM 1.x/2.0 Module - 'record' SQL Injection
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ZYXEL 3 Prestige Router - HTTP Remote Administration Configuration Reset
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.10 - Remote Command Execution
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrase
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Halo 1.05 - Broadcast Client Crash
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Invision Power Board 2.0.0 < 2.0.2 - SQL Injection
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPKIT 1.6 - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
wodFtpDLX Client - ActiveX Control Buffer Overflow Crash
Buffer overflow in the WodFtpDLX.ocx (WeOnlyDo!) ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Java Runtime Environment 1.x Java Plugin - JavaScript Security Restriction Bypass
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, do
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow
Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.x - IPTables Logging Rules Integer Underflow Remote (PoC)
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a de
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPBProArcade 2.5 - SQL Injection
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows rem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TWiki 20030201 - 'search.pm' Remote Command Execution
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6.0 SP2 - File Download Security Warning Bypass
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Compressed Zipped Folders (MS04-034)
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows S
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Altiris Deployment Solution 5.6 - Client Service Privilege Escalation
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)
Multiple buffer overflows in SLMail 5.1.0.4420 allows remote attackers to execute arbitrary code via (1) a long EHLO arg
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cscope 13.0/15.x - Insecure Temporary File Creation (2)
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpBB 2.0.x - 'admin_cash.php' PHP Remote File Inclusion
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to e
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cscope 13.0/15.x - Insecure Temporary File Creation (1)
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TABS MailCarrier 2.51 - Remote Buffer Overflow
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiniBB 1.7f - 'user' SQL Injection
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiniShare 1.4.1 - Remote Buffer Overflow (2)
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET req
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.