Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.056exploits catalogados
35.925CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.640GitHub PoC 14.392VulnCheck XDB 8.755Nuclei 4.333Metasploit 3.478✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
DotBr 0.1 - 'System.php3' Remote Command Execution
DotBr 0.1 allows remote attackers to execute arbitrary shell commands via the cmd parameter to (1) exec.php3 or (2) syst
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Board 1.0 - User Password Disclosure
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web do
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 10.x - stmkfont Alternate Typeface Library Buffer Overflow (1)
Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 10.x - rs.F3000 Unauthorized Access
rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while op
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM AIX 4.3.3/5.1/5.2 - 'libIM' Buffer Overflow
Buffer overflow in libIM library (libIM.a) for National Language Support (NLS) on AIX 4.3 through 5.2 allows local users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RARLAB FAR 1.65/1.70 - File Manager Buffer Overflow
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash)
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT/2000 - 'cmd.exe' CD Buffer Overflow (PoC)
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argumen
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nethack 3 - Local Buffer Overflow (3)
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nethack 3 - Local Buffer Overflow (2)
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netgear FM114P Wireless Firewall - File Disclosure
Directory traversal vulnerability in the web configuration interface in Netgear FM114P 1.4 allows remote attackers to re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nethack 3 - Local Buffer Overflow (1)
Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allow
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Opera 6.0/7.0 - 'Username' URI Warning Dialog Buffer Overflow
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code v
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cedric Email Reader 0.4 - Global Configuration Script Remote File Inclusion
PHP remote file inclusion vulnerability in emailreader_execute_on_each_page.inc.php in Cedric Email Reader 0.4 allows re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cedric Email Reader 0.2/0.3 - Skin Configuration Script Remote File Inclusion
PHP remote file inclusion vulnerability in email.php (aka email.php3) in Cedric Email Reader 0.2 and 0.3 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HPUX 10.20/11 Wall Message - Local Buffer Overflow
Buffer overflow in wall for HP-UX 10.20 through 11.11 may allow local users to execute arbitrary code by calling wall wi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Celestial Software AbsoluteTelnet 2.0/2.11 - Title Bar Buffer Overflow
Buffer overflow in AbsoluteTelnet before 2.12 RC10 allows remote attackers to execute arbitrary code via a long window t
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Epic Games Unreal Engine 436 - Client Unreal URL Denial of Service
Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows XP - Redirector Privilege Escalation
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Epic Games Unreal Engine 436 - URL Directory Traversal
Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known fi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ByteCatcher FTP Client 1.0.4 - 'Server Banner' Buffer Overflow
Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
TOPO 1.41 - Full Path Disclosure
TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Electrasoft 32Bit FTP 9.49.1 - Client Long Server Banner Buffer Overflow
Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
OpenBSD 2.x/3.x - CHPass Temporary File Link File Content Revealing
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a tem
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPMyShop 1.0 - 'compte.php' SQL Injection
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands vi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 5.x/6.0 - Avatar HTML Injection
Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sambar Server 5.x - Open Proxy / Authentication Bypass
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attack
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BitchX 1.0 - 'RPL_NAMREPLY' Denial of Service
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nukebrowser 2.x - Remote File Inclusion
PHP remote file inclusion vulnerability in nukebrowser.php in Nukebrowser 2.1 to 2.5 allows remote attackers to execute
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.