Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.056exploits catalogados
35.925CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 (Windows 2000/XP) - Remote Buffer Overflow
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper Pro 4.7 - Web proxy Remote Buffer Overflow
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4)
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MTools 3.9.x - 'MFormat' Local Privilege Escalation
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedStorm Ghost Recon Game Engine - Remote Denial of Service
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GWeb HTTP Server 0.5/0.6 - Directory Traversal
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RobotFTP Server 1.0/2.0 - Remote Denial of Service
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP co
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Cygwin 1.3.x/2.0.x - Directory Traversal
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Proxy-Pro Professional GateKeeper 4.7 Web Proxy - Buffer Overrun
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
EZBoard 7.3 - Font Tag HTML Injection
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary sc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Samhain Labs 1.x - HSFTP Remote Format String
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary scr
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain priv
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpNewsManager 1.36 - functions Script File Disclosure
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dell TrueMobile 1300 WLAN System 3.10.39.0 Tray Applet - Local Privilege Escalation
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
LGames LBreakout2 2.2.2 - Multiple Environment Variable Buffer Overflow Vulnerabilities
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TYPSoft FTP Server 1.1 - Remote CPU Consumption (Denial of Service)
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (1)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (2)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PSOProxy 0.91 - Remote Buffer Overflow (3)
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary cod
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AOL Instant Messenger 4.x/5.x - Buddy Icon Predictable File Location
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'readings/index.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fool's Workshop Owl's Workshop 1.0 - 'resultsignore.php' Arbitrary File Access
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossa
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.