Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
77.900exploits catalogados
35.840CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.600GitHub PoC 14.323VulnCheck XDB 8.722Nuclei 4.320Metasploit 3.477✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (s
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TIPS MailPost 5.1.1 - Remote File Enumeration
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested f
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Goolery 0.3 - 'viewpic.php?conversation_id' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or we
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WebHost Automation Helm Control Panel 3.1.x - Multiple Input Validation Vulnerabilities
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - IFRAME Tag Buffer Overflow
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Goolery 0.3 - 'viewalbum.php?page' Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a ph
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
zgv 5.5 - Multiple Arbitrary Code Executions
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WvTFTPd 0.9 - Remote Heap Overflow
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x/5 - cURL 'open_basedir' Restriction Bypass
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a fi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Master of Orion III 1.2.5 - Denial of Service
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple c
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ID Software Quake II Server 3.2 - Multiple Vulnerabilities
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applica
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SCO OpenServer 5.0.7 - MMDF deliver Privilege Escalation
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GD Graphics Library - Local Heap Overflow
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to c
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Libxml2 - Multiple Remote Stack Buffer Overflow Vulnerabilities
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
libxml 2.6.12 nanoftp - Local Buffer Overflow
Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remot
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TABS MailCarrier 2.51 - SMTP 'EHLO' / 'HELO' Remote Buffer Overflow
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LinuxStat 2.x - Directory Traversal
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Quick 'n EasY 2.4 FTP Server - Remote Denial of Service
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ability Server 2.34 - 'APPE' Remote Buffer Overflow
Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Socat 1.4.0.2 - Not SETUID Local Format String
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy cli
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netbilling NBMEMBER Script - Information Disclosure
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which ca
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Browsers - Tabbed Browsing
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - '.WAV' File Handler Denial of Service
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in E
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ShixxNOTE 6.net - Remote Buffer Overflow
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multiple Browsers - Tabbed Browsing
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the acti
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UBBCentral UBB.Threads 3.4/3.5 - 'Dosearch.php' SQL Injection
SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ability Server 2.34 - FTP 'STOR' Remote Buffer Overflow
Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code v
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Veritas NetBackup - Remote Command Execution (Metasploit)
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1
38RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.