Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.899exploits catalogados
40.392CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.190Exploit-DB 24.488GitHub PoC 18.020VulnCheck XDB 10.108Nuclei 4.556Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.899 exploits
Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Integer Underflow
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-su
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Lack of free() Denial of Service
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpCollab 2.5.1 - Arbitrary File Upload
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authentica
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Information Leak
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vect
45RISCO
abrir ↗Exploit-DB
UCOPIA Wireless Appliance < 5.1.8 - Restricted Shell Escape
The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admi
23RISCO
abrir ↗GitHub PoC★ 3
this script is used for hack bluetooth devices CVE 2017 0785 which was done by ARMIS This File is password protected for password contact atusha@gmail.comr
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.
28RISCO
abrir ↗Exploit-DB
UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation
The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileg
23RISCO
abrir ↗Exploit-DB
phpCollab 2.5.1 - SQL Injection
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Heap Overflow
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
45RISCO
abrir ↗Exploit-DB
OpenText Document Sciences xPression 4.5SP1 Patch 13 - 'documentId' SQL Injection
OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might b
23RISCO
abrir ↗Exploit-DB
Linux Kernel < 4.14.rc3 - Local Denial of Service
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dnsmasq < 2.78 - Stack Overflow
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu
45RISCO
abrir ↗GitHub PoC★ 3
First script, pgp-cgi-cve-2012-1823 BASH script
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗GitHub PoC★ 5
own2pwn/blueborne-CVE-2017-1000251-POC
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ
28RISCO
abrir ↗GitHub PoC
billa3283/CVE-2017-0213
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser
93RISCO
abrir ↗GitHub PoC★ 2
SPRING DATA REST CVE-2017-8046 DEMO
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri
60RISCO
abrir ↗VulnCheck XDB
initial-access
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗Exploit-DB
Microsoft Excel - OLE Arbitrary Code Execution
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗Exploit-DB
ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download
ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php.
23RISCO
abrir ↗Exploit-DB
FileRun < 2017.09.18 - SQL Injection
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize in
23RISCO
abrir ↗Exploit-DB
Trend Micro OfficeScan 11.0/XG (12.0) - Memory Corruption
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated u
23RISCO
abrir ↗Metasploit600
phpCollab 2.5.1 Unauthenticated File Upload
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authentica
60RISCO
abrir ↗GitHub PoC
CVE-2017-12943
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?RE
35RISCO
abrir ↗Exploit-DB
WordPress Plugin WPHRM - SQL Injection
WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - Man In The Middle Remote Code Execution
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to e
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - 'Host' Header Injection
A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Ho
23RISCO
abrir ↗GitHub PoC
clone
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and includ
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - Information Disclosure
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can acc
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Trend Micro OfficeScan 11.0/XG (12.0) - Private Key Disclosure
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to d
23RISCO
abrir ↗VulnCheck XDB
initial-access
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.