Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.958exploits catalogados
40.447CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.024VulnCheck XDB 10.108Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.959 exploits
GitHub PoC★ 3
VulApps/CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
60RISCO
abrir ↗GitHub PoC★ 7
Proof of concept of CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
60RISCO
abrir ↗GitHub PoC★ 12
poc for cve-2017-10661
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia
28RISCO
abrir ↗GitHub PoC★ 15
Manouchehri/CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge 38.14393.1066.0 - 'textarea.defaultValue' Memory Disclosure
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose in
28RISCO
abrir ↗GitHub PoC
This is an exploit for CVE-2017-7047, Works on 10.3.2 and below.
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS
23RISCO
abrir ↗Metasploit600
Malicious Git HTTP Server For CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
60RISCO
abrir ↗Metasploit400
Linux Kernel UDP Fragmentation Offset (UFO) Privilege Escalation
Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE
43RISCO
abrir ↗Exploit-DB
Red-Gate SQL Monitor < 3.10 / 4.2 - Authentication Bypass
In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mon
28RISCO
abrir ↗Metasploit600
DIR-850L (Un)authenticated OS Command Exec
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SER
23RISCO
abrir ↗Exploit-DB
NoMachine 5.3.9 - Local Privilege Escalation
An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privil
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Symantec Messaging Gateway < 10.6.3-267 - Cross-Site Request Forgery
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one
23RISCO
abrir ↗Exploit-DB
Android Bluetooth - 'Blueborne' Information Leak (1)
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9.1 - Privilege Escalation
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR env
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9.1 - 'Unitrends bpserverd' Remote Command Execution
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remot
35RISCO
abrir ↗Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
28RISCO
abrir ↗Metasploit600
Unitrends UEB bpserverd authentication bypass RCE
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin
50RISCO
abrir ↗Metasploit600
Unitrends UEB http api remote code execution
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, w
50RISCO
abrir ↗Metasploit600
Unitrends UEB http api remote code execution
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RISCO
abrir ↗Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appli
23RISCO
abrir ↗Exploit-DB
VMware WorkStation 12.5.5 - Virtual Machine Escape
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 ha
28RISCO
abrir ↗Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-296
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allo
28RISCO
abrir ↗Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9.1 - Authentication Bypass / Remote Command Execution
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers
28RISCO
abrir ↗GitHub PoC★ 8
this tool can generate a exp for cve-2017-8486, it is developed by python
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.