Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Metasploit600
Symantec Endpoint Protection Manager Authentication Bypass and Code Execution
CVE-2015-1489—31 jul 2015
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticat
43RISCO
abrir ↗
Metasploit600
Symantec Endpoint Protection Manager Authentication Bypass and Code Execution
CVE-2015-1487—31 jul 2015
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticat
50RISCO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2015-5477HIGHsob ataque31 jul 2015
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (
100RISCO
abrir ↗
GitHub PoC★ 64
PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
CVE-2015-5477HIGHsob ataque31 jul 2015
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (
100RISCO
abrir ↗
GitHub PoC★ 3
A little Python tool for exploiting CVE-2015-1560 and CVE-2015-1561. Quick'n'dirty. Real dirty.
CVE-2015-1560—31 jul 2015
SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis
23RISCO
abrir ↗
Metasploit300
Heroes of Might and Magic III .h3m Map file Buffer Overflow
CVE-2025-34124HIGH29 jul 2015
Heroes of Might and Magic III .h3m Map File Buffer Overflow
36RISCO
abrir ↗
GitHub PoC★ 11
jvazquez-r7/CVE-2015-5119
CVE-2015-5119HIGHsob ataque29 jul 2015
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.
100RISCO
abrir ↗
Metasploit300
BIND TKEY Query Denial of Service
CVE-2015-5477HIGHsob ataque28 jul 2015
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (
100RISCO
abrir ↗
Metasploit300
Moxa Device Credential Retrieval
CVE-2016-9361CRITICAL28 jul 2015
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52
48RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Sudo 1.8.14 (RHEL 5/6/7 / Ubuntu) - 'Sudoedit' Unauthorized Privilege Escalation
CVE-2015-5602—locallinux28 jul 2015
sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Libuser Library - Multiple Vulnerabilities
CVE-2015-3246HIGHsob ataquedoslinux27 jul 2015
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod
86RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4666—webappsphp27 jul 2015
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attack
43RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4667—webappsphp27 jul 2015
Multiple hardcoded credentials in Xsuite 2.x.
28RISCO
abrir ↗
Exploit-DB
WordPress Plugin Count Per Day 3.4 - SQL Injection
CVE-2015-5533—webappsphp27 jul 2015
SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote
23RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4664—webappsphp27 jul 2015
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t
28RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4665—webappsphp27 jul 2015
Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers
23RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4668—webappsphp27 jul 2015
Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sit
38RISCO
abrir ↗
Exploit-DB
Xceedium Xsuite - Multiple Vulnerabilities
CVE-2015-4669—webappsphp27 jul 2015
The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the sy
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Libuser Library - Multiple Vulnerabilities
CVE-2015-3245—doslinux27 jul 2015
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in t
38RISCO
abrir ↗
Exploit-DB
Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery
CVE-2015-2878—webappsmultiple24 jul 2015
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijac
23RISCO
abrir ↗
Metasploit500
Libuser roothelper Privilege Escalation
CVE-2015-3246HIGHsob ataque24 jul 2015
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mod
86RISCO
abrir ↗
Metasploit500
Libuser roothelper Privilege Escalation
CVE-2015-3245—24 jul 2015
Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in t
38RISCO
abrir ↗
Exploit-DB
XPCOM - Race Condition
CVE-2005-2414—webappsphp21 jul 2015
Race condition in the xpcom library, as used by web browsers such as Firefox, Mozilla, Netscape, and Galeon, allows remo
23RISCO
abrir ↗
Metasploit500
Apple OS X DYLD_PRINT_TO_FILE Privilege Escalation
CVE-2015-3760—21 jul 2015
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to g
18RISCO
abrir ↗
Exploit-DB
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
CVE-2015-4071—webappsphp21 jul 2015
The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users
23RISCO
abrir ↗
Exploit-DB
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
CVE-2015-4074—webappsphp21 jul 2015
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar
50RISCO
abrir ↗
Exploit-DB
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
CVE-2015-4073—webappsphp21 jul 2015
Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to exe
23RISCO
abrir ↗
Exploit-DB
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
CVE-2015-4075—webappsphp21 jul 2015
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted
23RISCO
abrir ↗
Exploit-DB
Internet Download Manager - OLE Automation Array Remote Code Execution
CVE-2014-6332HIGHsob ataqueremotewindows21 jul 2015
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
100RISCO
abrir ↗
Exploit-DB
Joomla! Component Helpdesk Pro < 1.4.0 - Multiple Vulnerabilities
CVE-2015-4072—webappsphp21 jul 2015
Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote att
23RISCO
abrir ↗
← anteriorpágina 1172 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.