Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.057exploits catalogados
36.288CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.460Referência 22.910GitHub PoC 14.997VulnCheck XDB 8.843Nuclei 4.358Metasploit 3.489✓ só verificadosrecentespopularesrisco
19.066 exploits
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - Read AV in MSHTML!Layout::LayoutBuilderDivider::BuildPageLayout (MS16-023)
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.24 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Kernel - 'ATMFD.dll' OTF Font Processing Pool-Based Buffer Overflow (MS16-026)
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TeamPass 2.1.24 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Exim < 4.86.2 - Local Privilege Escalation
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Exim 4.84-3 - Local Privilege Escalation
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perl_startup argument.
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.10/3.18 /4.4 - Netfilter IPT_SO_SET_REPLACE Memory Corruption
Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Digital Editions 4.5.0 - '.pdf' Critical Memory Corruption
Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corr
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 3.10/3.18 /4.4 - Netfilter IPT_SO_SET_REPLACE Memory Corruption
The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local us
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution
Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avast! - Authenticode Parsing Memory Corruption
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear NMS300 ProSafe Network Management System - Arbitrary File Upload (Metasploit)
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ATutor 2.2.1 - SQL Injection / Remote Code Execution (Metasploit)
SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbi
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libxml2 - xmlParserPrintFileContextInternal Heap Buffer Overread
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 1
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libxml2 - xmlDictAddString Heap Buffer Overread
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated adminis
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - SimpleButton Creation Type Confusion
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - ATF Processing Heap Overflow
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Out-of-Bounds Image Read
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
83RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - H264 File Stack Corruption
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - textfield Constructor Type Confusion
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - LoadVars.decode Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - BitmapData.drawWithQuality Heap Overflow
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Kerberos Security Feature Bypass (MS16-014)
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 7 SP1 (x86) - 'WebDAV' Local Privilege Escalation (MS16-016) (1)
The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Window
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure
The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows r
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Photoshop CC / Bridge CC - '.png' Parsing Memory Corruption (1)
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Photoshop CC / Bridge CC - '.iff' Parsing Memory Corruption
Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.