Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB
QuickHeal 16.00 - 'webssx.sys' Driver Denial of Service
The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.
23RISCO
abrir ↗Exploit-DB
AUFS (Ubuntu 15.10) - 'allow_userns' Fuse/Xattr User Namespaces Privilege Escalation
The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local use
23RISCO
abrir ↗Exploit-DB
Geeklog < 1.4.0 - Multiple Vulnerabilities
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attacke
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - SimpleButton Creation Type Confusion
Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on
28RISCO
abrir ↗Exploit-DB
AUFS (Ubuntu 15.10) - 'allow_userns' Fuse/Xattr User Namespaces Privilege Escalation
The aufs module for the Linux kernel 3.x and 4.x does not properly restrict the mount namespace, which allows local user
23RISCO
abrir ↗GitHub PoC★ 51
Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
28RISCO
abrir ↗GitHub PoC
glibc check and update in light of CVE-2015-7547
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISCO
abrir ↗Exploit-DB
ADOdb < 4.71 - Cross Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow re
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Sound.loadPCMFromByteArray Dangling Pointer
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
83RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - Out-of-Bounds Image Read
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗GitHub PoC★ 1
t0r0t0r0/CVE-2015-7547
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - BitmapData.drawWithQuality Heap Overflow
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - LoadVars.decode Use-After-Free
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and
35RISCO
abrir ↗GitHub PoC★ 5
test script for CVE-2015-7547
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - textfield Constructor Type Confusion
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - ATF Processing Heap Overflow
Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS
35RISCO
abrir ↗Exploit-DB
Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive informat
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash - H264 File Stack Corruption
Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on
28RISCO
abrir ↗Exploit-DB
Flash ActiveX 28.0.0.137 - Code Execution (1)
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISCO
abrir ↗Exploit-DB✓ VexDay Proof
glibc - 'getaddrinfo' Stack Buffer Overflow (PoC)
Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C
45RISCO
abrir ↗GitHub PoC★ 1
Heartbleed
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir ↗GitHub PoC★ 16
CVE-2016-1287 vulnerability test
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0
45RISCO
abrir ↗Metasploit600
Primefaces Remote Code Execution Exploit
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir ↗Exploit-DB
Microsoft Windows 7 (x86) - 'afd.sys' Dangling Pointer Privilege Escalation (MS14-040)
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Wind
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Kerberos Security Feature Bypass (MS16-014)
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server
28RISCO
abrir ↗Metasploit600
Xymon useradm Command Execution
xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote authenticated users to execute arbitrary commands via
50RISCO
abrir ↗Metasploit600
Ubiquiti airOS Arbitrary File Upload
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
85RISCO
abrir ↗Exploit-DB
Flash ActiveX 28.0.0.137 - Code Execution (2)
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISCO
abrir ↗GitHub PoC
Gitlabpro/The-analysis-of-the-cve-2015-8651
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and bef
83RISCO
abrir ↗Exploit-DB
Yeager CMS 1.2.1 - Multiple Vulnerabilities
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadin
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.