Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.056exploits catalogados
35.925CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
Basic Analysis and Security Engine (BASE) 1.2.4 - PrintFreshPage Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Abyss Web Server 1.1.2 - Incomplete HTTP Request Denial of Service
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (1)
The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.x/2.4.x - I/O System Call File Existence
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (3)
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSysInfo 2.0/2.1 - 'index.php' LNG File Disclosure
Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 2000/NT 4 - RPC Locator Service Remote Overflow
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun SUNWlldap Library Hostname - Local Buffer Overflow
Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a lon
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (2)
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Instant TopTools 5.0 - Remote Denial of Service
hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.2.x/2.4.x (RedHat) - 'ptrace/kmod' Local Privilege Escalation
The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Justice Guestbook 1.3 - Full Path Disclosure
Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3,
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sendmail 8.11.6 - Address Prescan Memory Corruption
The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain co
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ScozBook 1.1 - Full Path Disclosure
ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.ph
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNOME Eye Of Gnome 1.0.x/1.1.x/2.2 - Format String
Format string vulnerability in Eye Of Gnome (EOG) allows attackers to execute arbitrary code via format string specifier
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'socket_recvfrom()' Signed Integer Memory Corruption
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GlobalScape CuteFTP 5.0 - LIST Response Buffer Overflow
Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.x - 'socket_recv()' Signed Integer Memory Corruption
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 6.5 Addon - 'Viewpage.php' File Disclosure
Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 4.3 - 'socket_iovec_alloc()' Integer Overflow
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 (Windows XP/2000/NT 4.0) - WebDAV 'ntdll.dll' Remote Buffer Overflow (1)
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - WebDAV Remote
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS - WebDAV 'ntdll.dll' Remote Overflow
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Wind
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AdMan 1.0.20051221 - 'ViewStatement.php' SQL Injection
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute ar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Advanced Poll 2.0 - Remote Information Disclosure
Advanced Poll 2.0.2 allows remote attackers to obtain sensitive information via an HTTP request to info.php, which invok
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Planetmoon - Guestbook Clear Text Password Retrieval
PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XOOPS 2.0 XoopsOption - Information Disclosure
XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOp
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ximian Evolution 1.x - MIME image/* Content-Type Data Inclusion
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly esca
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.