Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.496exploits catalogados
34.964CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.899GitHub PoC 13.937VulnCheck XDB 8.510Nuclei 4.239Metasploit 3.468✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
Hyleos ChemView - ActiveX Control Stack Buffer Overflow (Metasploit)
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos Ch
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Impact Software AdPeeps - Cross-Site Scripting / HTML Injection
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nuBuilder 10.04.20 - Local File Inclusion
Directory traversal vulnerability in productionnu2/fileuploader.php in nuBuilder 10.04.20, and possibly other versions b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component TTVideo 1.0 - SQL Injection
SQL injection vulnerability in ttvideo.php in the TTVideo (com_ttvideo) component 1.0 for Joomla! allows remote attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
sSMTP 2.62 - 'standardize()' Buffer Overflow
The standardise function in Anibal Monsalve Salazar sSMTP 2.61 and 2.62 allows local users to cause a denial of service
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Freeway CMS 1.4.3.210 - SQL Injection
SQL injection vulnerability in index.php in Freeway CMS 1.4.3.210 allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Visites 1.1 RC2 - Remote File Inclusion
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
httpdx - 'h_handlepeer()' Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote at
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component FreiChat 1.0/2.x - HTML Injection
Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - ASN.1 Library Bitstring Heap Overflow (MS04-007) (Metasploit)
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microso
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI FrontPage 'fp30reg.dll' Chunked Overflow (MS03-051) (Metasploit)
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit)
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vBulletin - 'misc.php' Template Name Arbitrary Code Execution (Metasploit)
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Message Queueing Service - DNS Name Path Overflow (MS07-065) (Metasploit)
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Window
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XML-RPC Library 1.3.0 - 'xmlrpc.php' Arbitrary Code Execution (Metasploit)
Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PH
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft DNS RPC Service - 'extractQuotedChar()' TCP Overflow (MS07-029) (Metasploit)
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 200
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks 6.5 - Desktop/Server Management Overflow (Metasploit)
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENwor
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat mod_jk 1.2.20 - Remote Buffer Overflow (Metasploit)
Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apach
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Simple PHP Blog 0.4.0 - Remote Command Execution (Metasploit)
upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which cou
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - ypupdated Command Execution (Metasploit)
The SunView (SunTools) selection_svc facility allows remote users to read files.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TikiWiki jhot - Remote Command Execution (Metasploit)
Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execu
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 5l - 'FTPd' Remote DES Hash
Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST com
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Joomla! Component Joomdle 0.24 - SQL Injection
SQL injection vulnerability in the Joomdle (com_joomdle) component 0.24 and earlier for Joomla! allows remote attackers
23RISCO
abrir ↗Exploit-DB
Joomla! Component Ozio Gallery - SQL Injection
SQL injection vulnerability in the Ozio Gallery (com_oziogallery) component for Joomla! allows remote attackers to execu
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
sNews 1.7 - 'index.php?category' SQL Injection
SQL injection vulnerability in index.php in sNews 1.7 allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB
Joomla! Component YouTube 1.5 - SQL Injection
SQL injection vulnerability in the YouTube (com_youtube) component 1.5 for Joomla! allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AKY Blog - SQL Injection
SQL injection vulnerability in default.asp in AKY Blog allows remote attackers to execute arbitrary SQL commands via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via (1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PhotoPost PHP 4.6.5 - 'ecard.php' SQL Injection
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauth
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.