Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RISCO
abrir ↗Exploit-DB
Oracle WebCenter Sites (FatWire Content Server) - Multiple Vulnerabilities
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ModSecurity - 'POST' Security Bypass
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver ar
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
jCore - '/admin/index.php?path' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject ar
23RISCO
abrir ↗Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.
23RISCO
abrir ↗Exploit-DB
EZHomeTech EzServer 7.0 - Remote Heap Corruption
A Code Execution vulnerability exists in the memcpy function when processing AMF requests in Ezhometech EzServer 7.0, wh
23RISCO
abrir ↗Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.
23RISCO
abrir ↗Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
35RISCO
abrir ↗Exploit-DB
Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities
Samsung Kies before 2.5.0.12094_27_11 has registry modification.
23RISCO
abrir ↗Exploit-DB
Huawei Technologies Internet Mobile - Unicode (SEH)
Buffer overflow in the back-end component in Huawei UTPS 1.0 allows local users to gain privileges via a long IDS_PLUGIN
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Excel - Denial of Service
Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cau
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VideoLAN VLC Media Player 2.0.3 - '.png' ReadAV Crash (PoC)
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application crash
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KeyHelp - ActiveX LaunchTriPane Remote Code Execution (Metasploit)
An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenX 2.8.10 - 'plugin-index.php' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin 3.5.2.2 - 'server_sync.php' Backdoor (Metasploit)
phpMyAdmin 3.5.2.2, as distributed by the cdnetworks-kr-1 mirror during an unspecified time frame in 2012, contains an e
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Webmin 1.580 - '/file/show.cgi' Remote Command Execution (Metasploit)
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel UDEV < 1.4.1 - 'Netlink' Local Privilege Escalation (Metasploit)
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to ga
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avaya IP Office Customer Call Reporter - 'ImageUpload.ashx' Remote Command Execution (Metasploit)
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - execCommand Use-After-Free (MS12-063) (Metasploit)
Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 al
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NTR - ActiveX Control 'StopModule()' Remote Code Execution (Metasploit)
The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
InduSoft Web Studio - Arbitrary File Upload / Remote Code Execution (Metasploit)
CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 does not require au
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samba 3.4.16/3.5.14/3.6.4 - SetInformationPolicy AuditEventsInfo Heap Overflow (Metasploit)
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement valida
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NTR - ActiveX Control 'Check()' Method Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitr
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'AfdJoinLeaf' Local Privilege Escalation (MS11-080) (Metasploit)
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly valid
98RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Safari - LibTIFF Buffer Overflow (Metasploit)
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and othe
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.2.x - 'uname()' System Call Local Information Disclosure
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive i
23RISCO
abrir ↗Exploit-DB
PLIB 1.8.5 - 'ssg/ssgParser.cxx' Local Buffer Overflow
Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS Mobile Mail - LibTIFF Buffer Overflow (Metasploit)
Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.