Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.620exploits catalogados
35.647CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.455Referência 22.429GitHub PoC 14.270VulnCheck XDB 8.693Nuclei 4.299Metasploit 3.474✓ só verificadosrecentespopularesrisco
24.455 exploits
Exploit-DB✓ VexDay Proof
Solaris 10 - 'sysinfo()' Local Kernel Memory Disclosure (1)
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo sys
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MusicBox 2.3.4 - 'page' SQL Injection
SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comma
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion
PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cheese Tracker 0.9.9 - Local Buffer Overflow
Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlie
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Mambo Component multibanners 1.0.1 - Remote File Inclusion
PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote att
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) F
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentatio
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Tomcat 5 - Information Disclosure
Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other prod
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Chameleon LE 1.203 - 'index.php' Directory Traversal
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PH
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - ASP Stack Overflow (MS06-034)
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote atta
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Mailslot Ring0 Memory Corruption (MS06-035)
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.13.5 - Remote Signal Handling (PoC)
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by trig
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPHostBot 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IDevSpot PHPLinkExchange 1.0 - 'index.php' Remote File Inclusion
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - String To Binary Function Denial of Service
Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cras
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MiniBB 1.5 - 'news.php' Remote File Inclusion
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SiteDepth CMS 3.0.1 - 'SD_DIR' Remote File Inclusion
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco/Protego CS-MARS < 4.2.1 - 'JBoss' Remote Code Execution
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Res
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GeoAuctions 1.0.6 Enterprise - 'index.php?d' SQL Injection
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dumb 0.9.3 - 'it_read_envelope' Remote Heap Overflow (PoC)
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ear
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - OVCtl Denial of Service
Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - DataSourceControl Denial of Service
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a deni
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Security Monitoring Analysis and Response System JBoss - Command Execution
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitorin
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.6.13 < 2.6.17.4 - 'logrotate prctl()' Local Privilege Escalation
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.