Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.313exploits catalogados
34.834CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Cain & Abel 4.9.24 - RDP Buffer Overflow (Metasploit)
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier,
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo - Cache_Lite Class MosConfig_absolute_path Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and e
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BASE - 'base_qry_common' Remote File Inclusion (Metasploit)
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_gl
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers t
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
America Online ICQ - ActiveX Control Arbitrary File Download and Execute (Metasploit)
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell NetIdentity Agent - XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute ar
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle 10gR2 - TNS Listener AUTH_SESSKEY Buffer Overflow (Metasploit)
Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PoPToP - Negative Read Overflow (Metasploit)
ctrlpacket.c in PoPToP PPTP server before 1.1.4-b3 allows remote attackers to cause a denial of service via a length fie
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 an
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iOS 4.0.2 - Networking Packet Filter Rules Privilege Escalation
Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allow
23RISCO
abrir ↗Exploit-DB
AuraCMS 1.62 - 'pfd.php' SQL Injection
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 10.2.0 - Remote Execution (Metasploit)
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration M
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
The Windows Task Scheduler in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7
43RISCO
abrir ↗Exploit-DB
S_CMS 2.5 - Multiple Vulnerabilities
Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB
S_CMS 2.5 - Multiple Vulnerabilities
SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Jimtawl 1.0.2 - Local File Inclusion
Directory traversal vulnerability in the Jimtawl (com_jimtawl) component 1.0.2 Joomla! allows remote attackers to read a
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Task Scheduler Privilege Escalation
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vec
23RISCO
abrir ↗Exploit-DB
DVD Rental Software - SQL Injection
SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)
Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (2)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebKit - Insufficient Entropy Random Number Generator (1)
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/index.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Eclipse 3.6.1 - Help Server 'help/advanced/content.jsp' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclips
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chameleon Social Networking Software - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not p
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure
Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote at
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Network Associates PGP KeyServer 7 - LDAP Buffer Overflow (Metasploit)
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute a
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CitectSCADA/CitectFacilities ODBC - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.