Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados

40.452CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentes populares risco

86.991 exploits

Exploit-DB✓ VexDay Proof

Apple Mac OSX - 'IntelAccelerator::gstqConfigure' Kernel NULL Dereference

CVE-2015-7106—dososx28 jan 2016

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX / iOS - Unsandboxable Kernel Use-After-Free in Mach Vouchers

CVE-2015-7047—dosmultiple28 jan 2016

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX / iOS - NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow

CVE-2015-7083—dosmultiple28 jan 2016

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to g

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - 'IOHDIXControllerUserClient::convertClient' Buffer Integer Overflow

CVE-2015-6995—dososx28 jan 2016

The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to ex

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX / iOS - Double-Delete IOHIDEventQueue::start Code Execution

CVE-2015-7112—dosmultiple28 jan 2016

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attacke

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference

CVE-2015-6996—dososx28 jan 2016

IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute a

23RISCO

abrir ↗

Exploit-DB

SAP HANA 1.00.095 - hdbindexserver Memory Corruption

CVE-2015-7986—webappsmultiple28 jan 2016

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a deni

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - 'gst_configure' Kernel Buffer Overflow

CVE-2015-7077—dososx28 jan 2016

The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

iOS Kernel - AppleOscarGyro Use-After-Free

CVE-2016-1719—dosios28 jan 2016

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain pri

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Apple Mac OSX - IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference

CVE-2015-7068—dososx28 jan 2016

IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to exe

23RISCO

abrir ↗

GitHub PoC★ 10

forced-request/rails-rce-cve-2016-0752

CVE-2016-0752HIGHsob ataque26 jan 2016

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.

100RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)

CVE-2016-0006—localwindows25 jan 2016

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (1)

CVE-2016-0007—localwindows25 jan 2016

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Microsoft Windows - Sandboxed Mount Reparse Point Creation Mitigation Bypass Redux (MS16-008) (2)

CVE-2016-0007—localwindows25 jan 2016

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,

23RISCO

abrir ↗

Exploit-DB

Linux Kernel 3.x/4.x - prima WLAN Driver Heap Overflow

CVE-2015-0569—doslinux25 jan 2016

Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka W

23RISCO

abrir ↗

Exploit-DB

FreeBSD SCTP ICMPv6 - Error Processing

CVE-2016-1879—dosfreebsd25 jan 2016

The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, w

28RISCO

abrir ↗

Exploit-DB

Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation

CVE-2015-8088—localhardware24 jan 2016

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7

23RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2016-0728—23 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

GitHub PoC

googleweb/CVE-2016-0728

CVE-2016-0728—23 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2016-0728—22 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

VulnCheck XDB

local

CVE-2014-4113HIGHsob ataque22 jan 2016

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

abrir ↗

GitHub PoC★ 5

Exploit CVE-2014-4113

CVE-2014-4113HIGHsob ataque22 jan 2016

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

abrir ↗

GitHub PoC★ 22

nardholio/cve-2016-0728

CVE-2016-0728—22 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

Exploit-DB

NTP - Local Privilege Escalation

CVE-2016-0727—locallinux21 jan 2016

The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ub

23RISCO

abrir ↗

Metasploit600

Oracle ATS Arbitrary File Upload

CVE-2016-0492—20 jan 2016

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12

60RISCO

abrir ↗

Metasploit600

Oracle ATS Arbitrary File Upload

CVE-2016-0491—20 jan 2016

Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12

60RISCO

abrir ↗

GitHub PoC★ 3

CVE-2016-0728 Linux Kernel Vulnerability

CVE-2016-0728—20 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2016-0728—20 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

GitHub PoC★ 1

idl3r/cve-2016-0728

CVE-2016-0728—19 jan 2016

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

CesarFTP 0.99g - XCWD Denial of Service

CVE-2006-2961—doswindows19 jan 2016

Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applicat

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.