Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
86.991 exploits
Exploit-DB✓ VexDay Proof
Alienvault OSSIM/USM 5.3.1 - PHP Object Injection
CVE-2016-8580—webappsphp02 nov 2016
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vuln
23RISCO
abrir ↗
GitHub PoC
Source code: https://github.com/XiphosResearch/exploits/tree/master/Joomraa
CVE-2016-8869—02 nov 2016
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before
60RISCO
abrir ↗
GitHub PoC★ 5
firebroo/CVE-2016-6663
CVE-2016-6663—02 nov 2016
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB be
23RISCO
abrir ↗
Exploit-DB
MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'root' System User Privilege Escalation
CVE-2016-6664—locallinux01 nov 2016
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server befo
23RISCO
abrir ↗
GitHub PoC
hittlle/CVE-2011-1974-PoC
CVE-2011-1974—01 nov 2016
NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Serve
23RISCO
abrir ↗
Exploit-DB
MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'mysql' System User Privilege Escalation / Race Condition
CVE-2016-5616—locallinux01 nov 2016
20RISCO
abrir ↗
Exploit-DB
MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'root' System User Privilege Escalation
CVE-2016-5617—locallinux01 nov 2016
20RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow (SEH)
CVE-2006-0441—remotewindows01 nov 2016
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER c
60RISCO
abrir ↗
Metasploit600
Bassmaster Batch Arbitrary JavaScript Injection Remote Code Execution
CVE-2014-7205—01 nov 2016
Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for t
60RISCO
abrir ↗
Exploit-DB
MySQL / MariaDB / PerconaDB 5.5.x/5.6.x/5.7.x - 'mysql' System User Privilege Escalation / Race Condition
CVE-2016-6663—locallinux01 nov 2016
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB be
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Missing Bounds Check in Escape 0x100009a
CVE-2016-8810—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x700010d
CVE-2016-7385—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple OS X/iOS Kernel - IOSurface Use-After-Free
CVE-2016-4625—localosx31 out 2016
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspeci
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple macOS 10.12 - 'task_t' Local Privilege Escalation
CVE-2016-4625—localmacos31 out 2016
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspeci
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Unchecked User-Provided Pointer in Escape 0x5000027
CVE-2016-8806—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple OS X/iOS - 'mach_ports_register' Multiple Memory Safety s
CVE-2016-4669—dosmultiple31 out 2016
An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS b
38RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - No Bounds Checking in Escape 0x7000194
CVE-2016-7390—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Missing Bounds Check in Escape 0x70000d5
CVE-2016-8808—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - NvStreamKms 'PsSetCreateProcessNotifyRoutineEx Local Stack Buffer Overflow Callback / Local Privilege Escalation
CVE-2016-8812—localwindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA GeForce Experience R340 before GFE 2.11.4.125 and R375 before G
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Unchecked Write to User-Provided Pointer in Escape 0x600000D
CVE-2016-7387—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Incorrect Bounds Check in Escape 0x70001b2
CVE-2016-8809—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Micro Focus Rumba 9.3 - ActiveX Stack Buffer Overflow (PoC)
CVE-2016-5228—doswindows31 out 2016
Stack-based buffer overflow in the PlayMacro function in ObjectXMacro.ObjectXMacro in WdMacCtl.ocx in Micro Focus Rumba
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Escape Code Leaks Uninitialised ExAllocatePoolWithTag Memory to Userspace
CVE-2016-7386—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - No Bounds Checking in Escape 0x7000170
CVE-2016-8811—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - UVMLiteController ioctl Handling Unchecked Input/Output Lengths Privilege Escalation
CVE-2016-7384—localwindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Escape 0x100010b Missing Bounds Check
CVE-2016-7391—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Stack Buffer Overflow in Escape 0x10000e9
CVE-2016-8807—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple OS X Kernel - IOBluetoothFamily.kext Use-After-Free
CVE-2016-1863—dososx31 out 2016
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local user
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
NVIDIA Driver - Stack Buffer Overflow in Escape 0x7000014
CVE-2016-8805—doswindows31 out 2016
For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 3
23RISCO
abrir ↗
Exploit-DB
Rumba FTP Client 4.x - Remote Stack Buffer Overflow (SEH)
CVE-2016-5764—remotewindows31 out 2016
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code executi
23RISCO
abrir ↗
← anteriorpágina 1130 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.