Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.966exploits catalogados
40.449CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.032VulnCheck XDB 10.108Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.966 exploits
Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
23RISCO
abrir ↗Exploit-DB
WildMIDI 0.4.2 - Multiple Vulnerabilities
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9.1 - 'Unitrends bpserverd' Remote Command Execution
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Unitrends UEB 9.1 - Authentication Bypass / Remote Command Execution
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remot
35RISCO
abrir ↗GitHub PoC★ 8
this tool can generate a exp for cve-2017-8486, it is developed by python
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗VulnCheck XDB
client-side
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗Exploit-DB
Microsoft Windows - '.LNK' Shortcut File Code Execution
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗Metasploit600
QNAP Transcode Server Command Execution
QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.
23RISCO
abrir ↗GitHub PoC★ 7
Attempt to steal kernelcredentials from launchd + task_t pointer (Based on: CVE-2017-7047)
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS
23RISCO
abrir ↗GitHub PoC★ 4
CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireF
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VirtualBox 5.1.22 - Windows Process DLL Signature Bypass Privilege Escalation
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version
23RISCO
abrir ↗Exploit-DB
Horde Groupware 5.2.21 - Unauthorized File Download
The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication
23RISCO
abrir ↗Exploit-DB
Tiandy IP Cameras 5.56.17.120 - Sensitive Information Disclosure
Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to
23RISCO
abrir ↗Exploit-DB
Technicolor TC7337 - 'SSID' Persistent Cross-Site Scripting
Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version
23RISCO
abrir ↗GitHub PoC★ 14
CVE-2016-0040 Privilege Escalation Exploit For WMI Receive Notification Vulnerability (x86-64)
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to g
91RISCO
abrir ↗Exploit-DB
DNSTracer 1.9 - Local Buffer Overflow
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o
28RISCO
abrir ↗Exploit-DB
Dashlane - DLL Hijacking
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane dire
23RISCO
abrir ↗GitHub PoC★ 67
Support x86 and x64
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Nitro Pro PDF Reader 11.0.3.173 - Javascript API Code Execution (Metasploit)
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory tra
50RISCO
abrir ↗Exploit-DB
Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. The directory traversal/file upload error
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS/iOS - 'xpc_data' Objects Sandbox Escape Privilege Escalation
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS
23RISCO
abrir ↗Exploit-DB
libmad 0.15.1b - 'mp3' Memory Corruption
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to
23RISCO
abrir ↗Exploit-DB
Advantech SUSIAccess < 3.0 - 'RecoveryMgmt' File Upload
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system
23RISCO
abrir ↗Exploit-DB
SOL.Connect ISET-mpp meter 1.2.4.2 - SQL Injection
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB
Advantech SUSIAccess < 3.0 - Directory Traversal / Information Disclosure (Metasploit)
An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system
23RISCO
abrir ↗Exploit-DB
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (d
23RISCO
abrir ↗Exploit-DB
Sound eXchange (SoX) 14.4.2 - Multiple Vulnerabilities
The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.