Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.449exploits catalogados
35.552CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.367GitHub PoC 14.225VulnCheck XDB 8.649Nuclei 4.283Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.451 exploits
Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_search/index.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PortailPHP 2 - '/mod_news/goodies.php?chemin' Traversal Arbitrary File Access
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
KDPics 1.11 - 'exif.php?lib_path' Remote File Inclusion
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMail Objects 6.x - Connect Method Remote Stack Buffer Overflow
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities
Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPProbid 5.24 - 'Lang.php' Remote File Inclusion
PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Flipper Poll 1.1.0 - 'poll.php?root_path' Remote File Inclusion
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'lgserver.exe' Remote Stack Overflow
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Comodo Firewall 2.3.6 - 'CMDMon.SYS' Multiple Denial of Service Vulnerabilities
cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Portail Web PHP 2.5.1 - 'includes.php' Remote File Inclusion
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Por
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Login_Frame.php' Cross-Site Scripting
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenEMR 2.8.2 - 'Import_XML.php' Remote File Inclusion
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EncapsCMS 0.3.6 - 'common_foot.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format String
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) v
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CascadianFAQ 4.1 - 'index.php' SQL Injection
SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to exe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 10 - ICMP Remote Denial of Service
Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Safari window.console.log Format String
Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of ser
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - iMovie HD '.imovieproj' Filename Format String
Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-as
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.x - Help Viewer '.help' Filename Format String
Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CVSTrac 2.0.0 - Defacement Denial of Service
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which all
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SSC DiskAccess NFS Client - 'DAPCNFSD.dll' Remote Stack Buffer Overflow
Buffer overflow in the EnumPrintersA function in dapcnfsd.dll 0.6.4.0 in Shaffer Solutions (SSC) DiskAccess NFS Client a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.4.8 (8L2127) - 'crashdump' Local Privilege Escalation
crashdump in Apple Mac OS X 10.4.8 allows local users in the admin group to modify arbitrary files or gain privileges vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of se
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Printer Providers (Spooler Service) - Local Privilege Escalation
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remo
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro VirusWall 3.81 - 'vscan/VSAPI' Local Buffer Overflow
Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CA BrightStor ARCserve - 'msgeng.exe' Remote Heap Overflow (2)
Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.