Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
Cisco ASA - WebVPN CIFS Handling Buffer Overflow
A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'gdi32.dll' EMR_SETDIBITSTODEVICE Heap Out-of-Bounds Reads / Memory Disclosure
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GOM Player 2.3.10.5266 - '.fpx' Denial of Service
GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspeci
23RISCO
abrir ↗Exploit-DB
F5 BIG-IP 11.6 SSL Virtual Server - 'Ticketbleed' Memory Disclosure
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android - Inter-process munmap in android.util.MemoryIntArray
An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbi
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ntfs-3g - Unsanitized modprobe Environment Privilege Escalation
ntfs-3g: Modprobe influence vulnerability via environment variables
56RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Edge - TypedArray.sort Use-After-Free (MS16-145)
The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Google Android - android.util.MemoryIntArray Ashmem Race Conditions
An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbi
23RISCO
abrir ↗GitHub PoC★ 1
CVE-2017-2370
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS
28RISCO
abrir ↗Exploit-DB
Linux Kernel 3.10.0 (CentOS 7) - Denial of Service
The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fa
28RISCO
abrir ↗Metasploit300
Kodi 17.0 Local File Inclusion Vulnerability
Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files v
40RISCO
abrir ↗GitHub PoC
CVE-2013-1775 Exploit written in Perl
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypas
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
HP Smart Storage Administrator 2.30.6.0 - Remote Command Injection (Metasploit)
A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found.
28RISCO
abrir ↗GitHub PoC★ 30
This is a tool for exploiting Ticketbleed (CVE-2016-9244) vulnerability.
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may
45RISCO
abrir ↗Exploit-DB
F5 BIG-IP SSL Virtual Server - 'Ticketbleed' Memory Disclosure
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may
45RISCO
abrir ↗GitHub PoC
Minion plugin for checking Ticketbleed (CVE-2016-9244)
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may
45RISCO
abrir ↗VulnCheck XDB
client-side
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis
100RISCO
abrir ↗Exploit-DB
Node.JS - 'node-serialize' Remote Code Execution
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu
35RISCO
abrir ↗GitHub PoC★ 1
CVE-2016-9079 exploit code as it appeared on https://lists.torproject.org/pipermail/tor-talk/2016-November/042639.html
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been dis
100RISCO
abrir ↗Exploit-DB
OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for
28RISCO
abrir ↗Metasploit600
Piwik Superuser Plugin Upload
Piwik Authenticated RCE via Custom Plugin Upload
43RISCO
abrir ↗Metasploit300
Postfixadmin Protected Alias Deletion Vulnerability
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected al
23RISCO
abrir ↗GitHub PoC★ 4
dmonst3r/CVE-2015-1579
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra
43RISCO
abrir ↗GitHub PoC★ 4
paralelo14/CVE-2015-1579
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra
43RISCO
abrir ↗Exploit-DB
ntfs-3g (Debian 9) - Local Privilege Escalation
ntfs-3g: Modprobe influence vulnerability via environment variables
56RISCO
abrir ↗Exploit-DB
CUPS < 2.0.3 - Remote Command Execution
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-va
28RISCO
abrir ↗VulnCheck XDB
initial-access
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitra
43RISCO
abrir ↗GitHub PoC
Ian Beer's exploit for CVE-2017-2370 (kernel memory r/w on iOS 10.2)
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS
28RISCO
abrir ↗GitHub PoC★ 5
Go Exploit for CVE-2011-4862
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka k
60RISCO
abrir ↗VulnCheck XDB
initial-access
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka k
60RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.