Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
80.753exploits catalogados
37.445CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 23.871GitHub PoC 15.407VulnCheck XDB 9.065Nuclei 4.426Metasploit 3.502✓ só verificadosrecentespopularesrisco
24.482 exploits
Exploit-DB
Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenSSL - ASN1 BIO Memory Corruption
Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Scrutinizer NetFlow & sFlow Analyzer - Multiple Vulnerabilities
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
newscoop 3.5.3 - Multiple Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_global
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Wireshark - 'call_dissector()' Null Pointer Dereference Denial of Service
epan/dissectors/packet-ansi_a.c in the ANSI A dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows r
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/tiny_mce/plugins/xoopsimagemanager/xoopsimagebrowser.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.5.4 - '/modules/pm/pmlite.php?to_userid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS before 2.5.5 allow remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CyberLink Power2Go - name Attribute (p2g) Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to e
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ownCloud 3.0.0 - 'index.php?redirect_url' Arbitrary Site Redirect
Open redirect vulnerability in index.php (aka the Login Page) in ownCloud before 3.0.3 allows remote attackers to redire
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.5 - 'login' HTML Injection
Cross-site scripting (XSS) vulnerability in sources/users.queries.php in TeamPass before 2.1.6 allows remote authenticat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Acuity CMS 2.6.2 - 'Username' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
V-CMS - Arbitrary '.PHP' File Upload / Execution (Metasploit)
Unrestricted file upload vulnerability in includes/inline_image_upload.php in AutoSec Tools V-CMS 1.0 allows remote atta
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IrfanView FlashPix PlugIn - Decompression Heap Overflow
Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute a
28RISCO
abrir ↗Exploit-DB
Invision Power Board 3.3.0 - Local File Inclusion
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Munin 2.0~rc4-1 - Remote Command Injection
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quest InTrust - Annotation Objects Uninitialized Pointer (Metasploit)
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not prope
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EMC IRM License Server 4.6.1.1995 - Denial of Service
The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WICD 1.7.1 - Local Privilege Escalation
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configur
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'box_publish_button.php?button_value' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget-form.php?title' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget.php' Multiple Cross-Site Scripting Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin All-in-One Event Calendar 1.4 - 'save_successful.php?msg' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress al
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 - ActiveX RunAndUploadFile() Method Overflow (Metasploit)
Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provision
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Estate Agent - SQL Injection
SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Snort 2 - DCE/RPC Preprocessor Buffer Overflow (Metasploit)
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire I
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)
Cross-site request forgery (CSRF) vulnerability in upload/users.php in Utopia News Pro (UNP) 1.4.0 and earlier allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LANDesk Lenovo ThinkManagement Console - Remote Command Execution (Metasploit)
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup
50RISCO
abrir ↗Exploit-DB
Liferay XSL - Command Execution (Metasploit)
Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 G
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.