Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Metasploit300
Apache James Server 2.3.2 Insecure User Creation Arbitrary File Write
CVE-2015-7611—01 out 2015
Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst
50RISCO
abrir ↗
Exploit-DB
Bosch Security Systems Dinion NBN-498 - Web Interface XML Injection
CVE-2015-6970—webappshardware01 out 2015
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows r
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apple Mac OSX 10.9.5/10.10.5 - 'rsh/libmalloc' Local Privilege Escalation
CVE-2015-5889—localosx01 out 2015
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors inv
38RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-7169CRITICALsob ataque30 set 2015
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗
GitHub PoC
gina-alaska/bash-cve-2014-7169-cookbook
CVE-2014-7169CRITICALsob ataque30 set 2015
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2)
CVE-2015-6589—webappsasp29 set 2015
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before
28RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Kaseya Virtual System Administrator (VSA) - Multiple Vulnerabilities (2)
CVE-2015-6922—webappsasp29 set 2015
Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before
60RISCO
abrir ↗
Exploit-DB
Apport 2.19 (Ubuntu 15.04) - Local Privilege Escalation
CVE-2015-1338—locallinux29 set 2015
kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly ga
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ManageEngine EventLog Analyzer - Remote Code Execution (Metasploit)
CVE-2015-7387—remotewindows29 set 2015
ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions
60RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Watchguard XCS - Remote Command Execution (Metasploit)
CVE-2015-5453—remotebsd28 set 2015
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell
50RISCO
abrir ↗
Exploit-DB
PCMan FTP Server 2.0.7 - Directory Traversal
CVE-2015-7601—remotewindows28 set 2015
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..//
50RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-7902—webappsjsp28 set 2015
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed
23RISCO
abrir ↗
Exploit-DB
Adobe Flash - 'uint' Capacity Field
CVE-2015-5568—doswindows28 set 2015
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Ad
28RISCO
abrir ↗
Exploit-DB
vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution
CVE-2016-1713—webappsphp28 set 2015
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger
43RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-7900—webappsjsp28 set 2015
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive
23RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-6494—webappsjsp28 set 2015
Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Watchguard XCS - Remote Command Execution (Metasploit)
CVE-2015-5452—remotebsd28 set 2015
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr
23RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-6493—webappsjsp28 set 2015
Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 bu
23RISCO
abrir ↗
Exploit-DB
BMC Track-It! 11.4 - Multiple Vulnerabilities
CVE-2016-6599—webappswindows28 set 2015
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService)
28RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-7901—webappsjsp28 set 2015
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execut
23RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-7903—webappsjsp28 set 2015
SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote
23RISCO
abrir ↗
Exploit-DB
BMC Track-It! 11.4 - Multiple Vulnerabilities
CVE-2016-6598—webappswindows28 set 2015
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on
28RISCO
abrir ↗
Exploit-DB
BisonWare BisonFTP Server 3.5 - Directory Traversal
CVE-2015-7602—remotewindows28 set 2015
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (d
50RISCO
abrir ↗
Metasploit600
Vtiger CRM - Authenticated Logo Upload RCE
CVE-2015-6000—28 set 2015
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger
50RISCO
abrir ↗
Exploit-DB
vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution
CVE-2015-6000—webappsphp28 set 2015
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger
50RISCO
abrir ↗
Metasploit300
BisonWare BisonFTP Server 3.5 Directory Traversal Information Disclosure
CVE-2015-7602—28 set 2015
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (d
50RISCO
abrir ↗
Metasploit300
PCMan FTP Server 2.0.7 Directory Traversal Information Disclosure
CVE-2015-7601—28 set 2015
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..//
50RISCO
abrir ↗
Metasploit600
Vtiger CRM - Authenticated Logo Upload RCE
CVE-2016-1713—28 set 2015
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger
43RISCO
abrir ↗
Exploit-DB
Adobe Acrobat Reader - AFParseDate JavaScript API Restrictions Bypass
CVE-2015-3073—doswindows28 set 2015
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten
28RISCO
abrir ↗
Exploit-DB
Mango Automation 2.6.0 - Multiple Vulnerabilities
CVE-2015-7904—webappsjsp28 set 2015
Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 al
23RISCO
abrir ↗
← anteriorpágina 1163 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.