Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.990exploits catalogados
40.451CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.043VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.990 exploits
Exploit-DB
Google Chrome - V8 Private Property Arbitrary Code Execution
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a
28RISCO
abrir ↗Exploit-DB
Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RISCO
abrir ↗Exploit-DB
HP PageWide Printers / HP OfficeJet Pro Printers (OfficeJet Pro 8210) - Arbitrary Code Execution
A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa
60RISCO
abrir ↗Exploit-DB
KBVault MySQL 0.16a - Arbitrary File Upload
KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-man
23RISCO
abrir ↗Metasploit500
LNK Code Execution Vulnerability
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗Metasploit200
Microsoft Windows RRAS Service MIBEntryGet Overflow
Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute c
23RISCO
abrir ↗Metasploit500
LNK Code Execution Vulnerability
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗GitHub PoC
CVE-2017-5638 Test environment
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GStreamer gst-plugins-bad Plugin - NULL Pointer Dereference
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of ser
23RISCO
abrir ↗Metasploit300
Easy File Sharing HTTP Server 7.2 POST Buffer Overflow
Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp
63RISCO
abrir ↗Exploit-DB
WordPress Plugin WP Jobs < 1.5 - SQL Injection
SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VMware vSphere Data Protection 5.x/6.x - Java Deserialization
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of th
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a deni
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se
23RISCO
abrir ↗Metasploit600
IPFire proxy.cgi RCE
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a
30RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS - Disk Arbitration Daemon Race Condition
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitra
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (i
23RISCO
abrir ↗Exploit-DB
nuevoMailer 6.0 - SQL Injection
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple macOS 10.12.3 / iOS < 10.3.2 - Userspace Entitlement Checking Race Condition
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of serv
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NU
23RISCO
abrir ↗Exploit-DB
libquicktime 1.2.4 - Denial of Service
The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of
23RISCO
abrir ↗Exploit-DB
libcroco 0.6.12 - Denial of Service
The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VMware Workstation 12 Pro - Denial of Service
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succes
23RISCO
abrir ↗Exploit-DB
Net Monitor for Employees Pro < 5.3.4 - Unquoted Service Path Privilege Escalation
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its
23RISCO
abrir ↗GitHub PoC
homjxi0e/CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗GitHub PoC
homjxi0e/CVE-2017-7472
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumptio
23RISCO
abrir ↗Exploit-DB
IDERA Uptime Monitor 7.8 - Multiple Vulnerabilities
IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the
23RISCO
abrir ↗GitHub PoC
homjxi0e/CVE-2017-9430
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.