Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.258exploits catalogados
36.019CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
cfingerd 1.4 - Format String (2)
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 4.2-stable - FTPd 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.5/2.6/7.0/8 - 'mailx -F' Local Buffer Overflow (2)
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F'
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHPSlash 0.5.3 2/0.6.1 - URL Block Arbitrary File Disclosure
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Siemens Reliant UNIX 5.4 - ppd -T Race Condition
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FreeBSD 2.2-4.2 / NetBSD 1.2-4.5 / OpenBSD 2.x - FTPd 'glob()' Remote Buffer Overflow
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern strin
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (1)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows NT 4.0/2000 - TCP Stack Denial of Service (2)
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of e
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape SmartDownload 1.3 - Remote Buffer Overflow
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary command
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro Interscan VirusWall (Linux) 3.0.1 - Multiple Program Buffer Overflows
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NCM Content Management System - content.pl Input Validation
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content dat
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Websphere/Net.Commerce 3 - CGI-BIN Macro Denial of Service
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7.0/8 - IPCS Timezone Buffer Overflow
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environme
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cfingerd 1.4 - Format String (1)
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privilege
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Application Server 4.0.8.2 - ndwfn4.so Buffer Overflow
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle app
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
nph-maillist 3.0/3.5 - Arbitrary Code Execution
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addres
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 2.x/7.0/8 - Xsun HOME Buffer Overflow
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME enviro
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Strip Password Generator 0.3/0.4/0.5 - Limited Password-Space
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (2)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (1)
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overf
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malfor
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IPFilter 3.x - Fragment Rule Bypass
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco PIX 4.x/5.x TACACS+ - Denial of Service
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to c
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd 4.0.99j-k readvar - Remote Buffer Overflow (Metasploit)
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NTPd - Remote Buffer Overflow
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial o
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP Server 2.0 - File Existence Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Caucho Technology Resin 1.2/1.3 - JavaBean Disclosure
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gene6 BPFTP FTP Server 2.0 - User Credentials Disclosure
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting info
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.