Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.258exploits catalogados
36.019CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
Cisco Virtual Central Office 4000 (VCO/4K) 5.1.3 - Remote Username / Password Retrieval
Cisco Virtual Central Office 4000 (VCO/4K) uses weak encryption to store usernames and passwords in the SNMP MIB, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco Catalyst 3500 XL - Arbitrary Command Execution
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands with
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun HotJava Browser 3 - Arbitrary DOM Access
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named wind
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Directory Server 4.12 - Directory Server Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
iPlanet Certificate Management System 4.2 - Directory Traversal
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire JRun 3 - Directory Disclosure
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Avirt Mail 4.0/4.2 - 'Mail From:' / 'Rcpt to:' Denial of Service
Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire JRun 2.3 - Arbitrary Code Execution
Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scrip
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (2)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (2)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 10.20/11.0 - crontab '/tmp' File
HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fil
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Intel InBusiness eMail Station 1.4.87 - Denial of Service
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of servi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oracle Internet Directory 2.0.6 - oidldap
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Hilgraeve HyperTerminal 6.0 - Telnet Buffer Overflow
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (5)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (1)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (4)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (3)
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
anaconda Foundation 1.4 < 1.9 - Directory Traversal
Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrar
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (2)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
cURL 6.1 < 7.4 - Remote Buffer Overflow (1)
Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbi
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft NetMeeting 3.0.1 4.4.3385 - Remote Desktop Sharing Denial of Service
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utili
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
XFree86 3.3.5/3.3.6 - Xlib Display Buffer Overflow
Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY envi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP 3.0/4.0 - Error Logging Format String
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary com
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Oatmeal Studios Mail File 1.10 - Arbitrary File Disclosure
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 9x/ME - Share Level Password Bypass (2)
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape iCal 2.1 Patch2 - iPlanet iCal 'iplncal.sh' Permissions
iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal confi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 9x/ME - Share Level Password Bypass (1)
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape iCal 2.1 Patch2 - iPlanet iCal 'csstart' Local Privilege Escalation
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could a
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.