Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.258exploits catalogados
36.019CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.697GitHub PoC 14.455VulnCheck XDB 8.811Nuclei 4.349Metasploit 3.488✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
GNOME esound 0.2.19 - Unix Domain Socket Race Condition
Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ipswitch IMail 6.x - File Attachment
The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (d
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CGI Script Center Auction Weaver 1.0.2 - Remote Command Execution
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacter
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GWScripts News Publisher 1.0 - 'author.file' Write
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow
Buffer overflow in RobTex Viking server earlier than 1.06-370 allows remote attackers to cause a denial of service or ex
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Gert Doering mgetty 1.1.19/1.1.20/1.1.21/1.22.8 - Symbolic Link Traversal
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
User-Mode Linux (Linux Kernel 2.4.17-8) - Memory Access Privilege Escalation
User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arb
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PragmaSys TelnetServer 2000 - rexec Buffer Overflow
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pas
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PragmaSys TelnetServer 2000 - rexec Buffer Overflow
Buffer overflow in Pragma Systems TelnetServer 2000 version 4.0 allows remote attackers to cause a denial of service via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (1)
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (1)
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CGI Script Center Account Manager 1.0 LITE / PRO - Administrative Password Alteration (2)
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote a
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
CGI Script Center Subscribe Me Lite 2.0 - Administrative Password Alteration (2)
Subscribe Me LITE does not properly authenticate attempts to change the administrator password, which allows remote atta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Darxite 0.4 - Login Buffer Overflow
Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username or
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP-UX 11.0 - net.init RC Script
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink attac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
PHP-Nuke 1.0/2.5 - Administrative Privileges
admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to ga
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
UMN Gopherd 2.x - Halidate Function Buffer Overflow
Buffer overflow in University of Minnesota (UMN) gopherd 2.x allows remote attackers to execute arbitrary commands via a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Minicom 1.82/1.83 - Capture-file Group Ownership
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
vqSoft vqServer 1.4.49 - Denial of Service
Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privileg
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
netwin netauth 4.2 - Directory Traversal
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
X-Chat 1.2/1.3/1.4/1.5 - Command Execution via URLs
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell meta
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Check Point Software Firewall-1 3.0/1 4.0/1 4.1 - Session Agent Dictionary Attack (1)
Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
David Bagley xlock 4.16 - User Supplied Format String (1)
xlockmore and xlockf do not properly cleanse user-injected format strings, which allows local users to gain root privile
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows Server 2000 - 'telnet.exe' NTLM Authentication
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capt
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (2)
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "T
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Luca Deri ntop 1.2 a7-9/1.3.1 - Remote Buffer Overflow
Buffer overflows in ntop running in web mode allows remote attackers to execute arbitrary commands.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Multisoft FlagShip 4.4 - Installation Permission
The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows lo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MediaHouse Software Statistics Server LiveStats 5.2 - Remote Buffer Overflow
Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Aptis Software TotalBill 3.0 - Remote Command Execution
The sysgen service in Aptis Totalbill does not perform authentication, which allows remote attackers to gain root privil
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.