Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.989exploits catalogados
40.450CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.042VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.989 exploits
Exploit-DB✓ VexDay Proof
Sophos Web Appliance 4.3.0.2 - 'trafficType' Remote Command Injection (Metasploit)
CVE-2017-6182—webappsjson18 jul 2017
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa
28RISCO
abrir ↗
Exploit-DB
Barracuda Load Balancer Firmware < 6.0.1.006 - Remote Command Injection (Metasploit)
CVE-2017-6320—webappshardware18 jul 2017
A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (20
28RISCO
abrir ↗
Exploit-DB
PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting
CVE-2017-11355—webappsmultiple18 jul 2017
Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to injec
23RISCO
abrir ↗
Exploit-DB
PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting
CVE-2017-11356—webappsmultiple18 jul 2017
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users
23RISCO
abrir ↗
Exploit-DB
Hashicorp vagrant-vmware-fusion < 4.0.20 - Local Privilege Escalation
CVE-2017-7642—localmacos18 jul 2017
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local use
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption
CVE-2017-8594—doswindows18 jul 2017
Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute
35RISCO
abrir ↗
Exploit-DB
Geneko Routers - Path Traversal
CVE-2017-11456—webappshardware16 jul 2017
Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticate
23RISCO
abrir ↗
GitHub PoC★ 339
An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
CVE-2017-0144HIGHsob ataqueransomware16 jul 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Exploit-DB
Firefox 50.0.1 - ASM.JS JIT-Spray Remote Code Execution
CVE-2016-9079HIGHsob ataqueremotewindows14 jul 2017
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis
100RISCO
abrir ↗
Exploit-DB
Firefox 50.0.1 - ASM.JS JIT-Spray Remote Code Execution
CVE-2017-5375—remotewindows14 jul 2017
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. T
35RISCO
abrir ↗
Metasploit400
OrientDB 2.2.x Remote Code Execution
CVE-2017-11467—13 jul 2017
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which a
60RISCO
abrir ↗
Metasploit600
Evince CBT File Command Injection
CVE-2017-1000083—13 jul 2017
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e
50RISCO
abrir ↗
Exploit-DB
OrientDB - Code Execution
CVE-2017-11467—remotewindows13 jul 2017
OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which a
60RISCO
abrir ↗
Exploit-DB
Skype for Business 2016 - Cross-Site Scripting
CVE-2017-8550—remotewindows12 jul 2017
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted
28RISCO
abrir ↗
Exploit-DB
360 Total Security - Local Privilege Escalation
CVE-2017-12653—remotewindows12 jul 2017
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any di
23RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2001-0797—12 jul 2017
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary comman
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2018-14665—12 jul 2017
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7247CRITICALsob ataque12 jul 2017
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-3010HIGHsob ataque12 jul 2017
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is a
91RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-10149CRITICALsob ataque12 jul 2017
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Windows 7/8.1/2008 R2/2012 R2/2016 R2 - 'EternalBlue' SMB Remote Code Execution (MS17-010)
CVE-2017-0144HIGHsob ataqueransomwareremotewindows11 jul 2017
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Exploit-DB
DataTaker DT80 dEX 1.50.012 - Information Disclosure
CVE-2017-11165—webappshardware11 jul 2017
dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a d
50RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
CVE-2017-6972—webappslinux11 jul 2017
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execu
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NfSen < 1.3.7 / AlienVault OSSIM 4.3.1 - 'customfmt' Command Injection
CVE-2017-7175—webappslinux11 jul 2017
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt pa
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NfSen < 1.3.7 / AlienVault OSSIM < 5.3.6 - Local Privilege Escalation
CVE-2017-6970—locallinux10 jul 2017
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privil
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NfSen < 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection
CVE-2017-6971—webappslinux10 jul 2017
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comma
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Struts 2.3.x Showcase - Remote Code Execution
CVE-2017-9791CRITICALsob ataquewebappsmultiple07 jul 2017
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RISCO
abrir ↗
GitHub PoC★ 2
Apache struts struts 2 048, CVE-2017-9791.
CVE-2017-9791CRITICALsob ataque07 jul 2017
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-9791CRITICALsob ataque07 jul 2017
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RISCO
abrir ↗
GitHub PoC★ 27
CVE-2017-9791
CVE-2017-9791CRITICALsob ataque07 jul 2017
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe
100RISCO
abrir ↗
← anteriorpágina 1093 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.