Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados

40.452CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentes populares risco

86.991 exploits

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.sharpness Setter - Use-After-Free

CVE-2015-8420—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.tabIndex Setter - Use-After-Free

CVE-2015-8431—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash MovieClip.duplicateMovieClip - Use-After-Free

CVE-2015-8412—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash MovieClip.attachBitmap - Use-After-Free

CVE-2015-8410—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash Selection.SetSelection - Use-After-Free

CVE-2015-8413—doswindows_x86-6418 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.replaceText - Use-After-Free

CVE-2015-8424—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.type Setter - Use-After-Free

CVE-2015-8429—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.setFormat - Use-After-Free

CVE-2015-8422—doswindows18 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and

35RISCO

Exploit-DB

QEMU (Gentoo) - Local Privilege Escalation

CVE-2015-8556—locallinux17 dez 2015

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.

28RISCO

Exploit-DB✓ VexDay Proof

win32k Desktop and Clipboard - Null Pointer Dereference

CVE-2015-6174—doswindows_x8617 dez 2015

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash GradientFill - Use-After-Frees

CVE-2015-8043—doswindows17 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

28RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.antiAliasType Setter - Use-After-Free

CVE-2015-8046—doswindows17 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

28RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash TextField.gridFitType Setter - Use-After-Free

CVE-2015-7652—doswindows17 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

28RISCO

Exploit-DB✓ VexDay Proof

win32k Clipboard Bitmap - Use-After-Free

CVE-2015-6173—doswindows_x8617 dez 2015

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

Metasploit300

Symantec Messaging Gateway 10 Exposure of Stored AD Password Vulnerability

CVE-2016-2203—17 dez 2015

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discove

38RISCO

Exploit-DB✓ VexDay Proof

Adobe Flash MovieClip.lineStyle - Use-After-Frees

CVE-2015-8044—doswindows17 dez 2015

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and

35RISCO

Exploit-DB✓ VexDay Proof

Zen Cart 1.5.4 - Local File Inclusion

CVE-2015-8352—webappsphp17 dez 2015

Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows Kernel - 'win32k!OffsetChildren' Null Pointer Dereference

CVE-2015-6171—doswindows17 dez 2015

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - dissct_rsl_ipaccess_msg Static Out-of-Bounds Read

CVE-2015-8731—dosmultiple16 dez 2015

The dissct_rsl_ipaccess_msg function in epan/dissectors/packet-rsl.c in the RSL dissector in Wireshark 1.12.x before 1.1

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow

CVE-2015-8725—dosmultiple16 dez 2015

The dissect_diameter_base_framed_ipv6_prefix function in epan/dissectors/packet-diameter.c in the DIAMETER dissector in

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - wmem_alloc Assertion Failure

CVE-2015-8739—dosmultiple16 dez 2015

The ipmi_fmt_udpport function in epan/dissectors/packet-ipmi.c in the IPMI dissector in Wireshark 2.0.x before 2.0.1 imp

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - file_read 'wtap_read_bytes_or_eof/mp2t_find_next_pcr' Stack Buffer Overflow

CVE-2015-8736—dosmultiple16 dez 2015

The mp2t_find_next_pcr function in wiretap/mp2t.c in the MP2T file parser in Wireshark 2.0.x before 2.0.1 does not reser

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - ascend_seek Static Out-of-Bounds Read

CVE-2015-8729—dosmultiple16 dez 2015

The ascend_seek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x b

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - addresses_equal 'dissect_rsvp_common' Use-After-Free

CVE-2015-8727—dosmultiple16 dez 2015

The dissect_rsvp_common function in epan/dissectors/packet-rsvp.c in the RSVP dissector in Wireshark 1.12.x before 1.12.

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - find_signature Stack Out-of-Bounds Read

CVE-2015-8726—dosmultiple16 dez 2015

wiretap/vwr.c in the VeriWave file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate cer

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - dissect_nbap_MACdPDU_Size SIGSEGV

CVE-2015-8730—dosmultiple16 dez 2015

epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not va

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - AirPDcapPacketProcess Stack Buffer Overflow

CVE-2015-8723—dosmultiple16 dez 2015

The AirPDcapPacketProcess function in epan/crypt/airpdcap.c in the 802.11 dissector in Wireshark 1.12.x before 1.12.9 an

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - dissect_diameter_base_framed_ipv6_prefix Stack Buffer Overflow

CVE-2015-8740—dosmultiple16 dez 2015

The dissect_tds7_colmetadata_token function in epan/dissectors/packet-tds.c in the TDS dissector in Wireshark 2.0.x befo

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - dissect_zcl_pwr_prof_pwrprofstatersp Static Out-of-Bounds Read

CVE-2015-8732—dosmultiple16 dez 2015

The dissect_zcl_pwr_prof_pwrprofstatersp function in epan/dissectors/packet-zbee-zcl-general.c in the ZigBee ZCL dissect

23RISCO

Exploit-DB✓ VexDay Proof

Wireshark - memcpy 'get_value / dissect_btatt' SIGSEGV

CVE-2015-8735—dosmultiple16 dez 2015

The get_value function in epan/dissectors/packet-btatt.c in the Bluetooth Attribute (aka BT ATT) dissector in Wireshark

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.