Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
Exploit-DB✓ VexDay Proof
Sympa 4.x - New List HTML Injection
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qt - '.bmp' Parsing Bug Heap Overflow
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)
Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possib
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyWebhosting - SQL Injection
SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL state
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PlaySms 0.7 - SQL Injection
SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to m
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mercantec SoftCart 4.00b - CGI Overflow (Metasploit)
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long
50RISCO
abrir ↗Metasploit500
Mercantec SoftCart CGI Overflow
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GV PostScript Viewer - Remote Buffer Overflow (2)
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPSwitch IMail Server 8.1 - Local Password Decryption Utility
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to rea
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AOL Instant Messenger AIM - 'Away' Message Local Overflow
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd - 'ftpdctl' 'pr_ctrls_connect' Local Overflow
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GV PostScript Viewer - Remote Buffer Overflow (1)
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibPNG 1.2.5 - 'png_jmpbuf()' Local Buffer Overflow
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute a
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Remote CVS 1.11.15 - 'error_prog_name' Arbitrary Code Execution
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.3.3 - AppleFileServer Overflow Remote Code Execution
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitr
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Internet Security Systems BlackICE PC Protection 3.6 - Firewall.INI Local Buffer Overrun
BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.i
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LibPNG Graphics Library - Remote Buffer Overflow
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute a
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OllyDbg 1.10 - Format String
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Mailutils 0.6 - Mail Email Header Buffer Overflow
Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU CFEngine 2.0.x/2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (2)
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
xine 0.99.2 - Remote Stack Overflow
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1)
23RISCO
abrir ↗Metasploit500
AOL Instant Messenger goaway Overflow
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU CFEngine 2.0.x/2.1 - AuthenticationDialogue Remote Heap Buffer Overrun (1)
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pavuk Digest - Authentication Remote Buffer Overflow
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attacke
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTP Server 3.x < 5.x - Local Privilege Escalation
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users t
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass rest
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Messenger (Linux) - Denial of Service (MS03-043)
The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allow
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CVSTrac - Arbitrary Code Execution
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlackJumboDog FTP Server - Remote Buffer Overflow
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1)
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ethereal 0.x - Multiple iSNS / SMB / SNMP Protocol Dissector Vulnerabilities
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abor
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.