Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.324exploits catalogados
36.054CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.458Referência 22.721GitHub PoC 14.477VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentespopularesrisco
24.458 exploits
Exploit-DB✓ VexDay Proof
Apache 1.2.5/1.3.1 / UnityMail 2.0 - MIME Header Denial of Service
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache 1.2.5/1.3.1 / UnityMail 2.0 - MIME Header Denial of Service
UnityMail allows remote attackers to conduct a denial of service via a large number of MIME headers.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SGI IRIX 6.4 - 'ioconfig' Local Privilege Escalation
ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow
Arbitrary command execution via IMAP buffer overflow in authenticate command.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Sun Solaris 2.6 - power management
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspe
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP JetAdmin 1.0.9 Rev. D - symlink
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on t
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Slackware Linux 3.5 - '/etc/group' Local Privilege Escalation
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, which
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ray Chan WWW Authorization Gateway 0.1 - Command Execution
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell metac
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ralf S. Engelschall ePerl 2.2.12 - Handling of ISINDEX Query
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Metainfo Sendmail 2.0/2.5 / MetaIP 3.1 - Upload / Execute Read Scripts
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.0/2.1 - Send a SIGIO Signal To Any Process
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local users
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetBSD 1.3.2 / SGI IRIX 6.5.1 - 'at(1)' Read File
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submit
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm qpopper 2.4 - POP Server Buffer Overflow (2)
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm qpopper 2.4 - POP Server Buffer Overflow (1)
Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long
53RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 - 'mailx' (2)
Buffer overflow in SGI IRIX mailx program.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
textcounter.pl 1.2 - Arbitrary Command Execution
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
RedHat Linux 4.2 / SGI IRIX 6.3 / Solaris 2.6 - 'mailx' (1)
Buffer overflow in SGI IRIX mailx program.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Cheyenne Inoculan for Windows NT 4.0 - Share
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FUL
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
AMD K6 Processor - Denial of Service
Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a p
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the temp
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (1)
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (2)
The dip program on many Linux systems allows local users to gain root access via a buffer overflow.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Debian suidmanager 0.18 - Command Execution
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris 7.0 - 'ufsdump' Local Buffer Overflow (1)
Solaris ufsrestore buffer overflow.
41RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (2)
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and poss
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BSD 'lpr' 2000.05.07/0.48/0.72 / lpr-ppd 0.72 - Local Buffer Overflow (1)
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and poss
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Linux Kernel 2.0.33 - IP Fragment Overlap
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, wh
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Qualcomm Eudora Internet Mail Server 1.2 - Remote Buffer Overflow
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND 4.9.7 -T1B - named SIGINT / SIGIOT Symlink
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root ki
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ISC BIND (Linux/BSD) - Remote Buffer Overflow (1)
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.