Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados

40.452CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentes populares risco

86.991 exploits

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8020—remotelinux13 dez 2016

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earl

28RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8021—remotelinux13 dez 2016

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8016—remotelinux13 dez 2016

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8017—remotelinux13 dez 2016

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows a

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8024—remotelinux13 dez 2016

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VS

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8023—remotelinux13 dez 2016

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8025—remotelinux13 dez 2016

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authen

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8022—remotelinux13 dez 2016

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

28RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8019—remotelinux13 dez 2016

Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and ea

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8018—remotelinux13 dez 2016

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

23RISCO

GitHub PoC★ 5

McAfee Virus Scan for Linux multiple remote flaws (CVE 2016-8016, CVE 2016-8017, CVE 2016-8018, CVE 2016-8019, CVE 2016-8020, CVE 2016-8021, CVE 2016-8022, CVE 2016-8023, CVE 2016-8024, CVE 2016-8025)

CVE-2016-8016—13 dez 2016

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

23RISCO

Exploit-DB✓ VexDay Proof

iOS 10.1.x - Certificate File Memory Corruption

CVE-2016-7626—dosios12 dez 2016

An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS be

23RISCO

Exploit-DB

Apache 2.4.23 mod_http2 - Denial of Service

CVE-2016-8740—doslinux12 dez 2016

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - IEFRAME CSelectionInteractButtonBehavior::_UpdateButtonLocation Use-After-Free (MS13-047)

CVE-2013-3111—doswindows12 dez 2016

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

Exploit-DB✓ VexDay Proof

Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit)

CVE-2016-9553—webappsphp12 dez 2016

The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its w

28RISCO

Exploit-DB✓ VexDay Proof

Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit)

CVE-2016-9554—webappslinux12 dez 2016

The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injectio

28RISCO

Exploit-DB

OpenSSL 1.1.0a/1.1.0b - Denial of Service

CVE-2016-7054—doslinux11 dez 2016

ChaCha20/Poly1305 heap-buffer-overflow

35RISCO

GitHub PoC★ 53

OpenSSH remote DOS exploit and vulnerable container

CVE-2016-6515—09 dez 2016

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password a

35RISCO

GitHub PoC

Chocobo Root (CVE-2016-8655) Analysis

CVE-2016-8655—09 dez 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

GitHub PoC

Linux af_packet.c race condition (local root)

CVE-2016-8655—09 dez 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

Exploit-DB

D-Link DI-524 - Cross-Site Request Forgery

CVE-2017-5633—webappshardware09 dez 2016

Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (2)

CVE-2013-1306—doswindows09 dez 2016

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (1)

CVE-2013-1309—doswindows09 dez 2016

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

35RISCO

GitHub PoC

Inspec profile for detecting CVE-2016-5195 aka Dirty COW

CVE-2016-5195HIGHsob ataque08 dez 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

GitHub PoC★ 5

LakshmiDesai/CVE-2016-8655

CVE-2016-8655—08 dez 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

VulnCheck XDB

local

CVE-2016-5195HIGHsob ataque08 dez 2016

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

Exploit-DB

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

CVE-2013-5528—webappshardware07 dez 2016

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

Exploit-DB

OpenSSH 7.2 - Denial of Service

CVE-2016-6515—doslinux07 dez 2016

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password a

35RISCO

Exploit-DB✓ VexDay Proof

Netgear R7000 - Command Injection

CVE-2016-6277HIGHsob ataquewebappscgi07 dez 2016

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.B

100RISCO

GitHub PoC

PoC for CVE-2016-8655 that causes a kernel panic

CVE-2016-8655—07 dez 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.