Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
Fuse 2.9.3-15 - Local Privilege Escalation
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as ro
23RISCO
abrir ↗GitHub PoC
cve-2015-3043 flash exploit
Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457
100RISCO
abrir ↗Exploit-DB
WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities
The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an i
23RISCO
abrir ↗Exploit-DB
WordPress Plugin WP Symposium 15.1 - '&show=' SQL Injection
SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to
23RISCO
abrir ↗Exploit-DB
WordPress Plugin WP Membership 1.2.3 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authent
23RISCO
abrir ↗Exploit-DB
Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation
Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin FeedWordPress 2015.0426 - SQL Injection
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for W
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Phoenix Contact ILC 150 ETH PLC - Remote Control Script
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
85RISCO
abrir ↗Metasploit300
PhoenixContact PLC Remote START/STOP Command
Phoenix Contact Software ProConOs and MultiProg Missing Authentication for Critical Function
85RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 8.0/8.1 (x64) - 'TrackPopupMenu' Local Privilege Escalation (MS14-058)
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a
100RISCO
abrir ↗Exploit-DB
QEMU - Floppy Disk Controller (FDC) (PoC)
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RISCO
abrir ↗Exploit-DB
BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)
Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - Local Privilege Escalation (MS15-051)
The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win
23RISCO
abrir ↗Exploit-DB
Microsoft Windows - 'CNG.SYS' Kernel Security Feature Bypass (MS15-052)
The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not pr
23RISCO
abrir ↗Exploit-DB
ElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal
Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, a
50RISCO
abrir ↗GitHub PoC★ 14
Experiments related to CVE-2015-3456
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a
28RISCO
abrir ↗Exploit-DB
Burning Board < 2.3.1 - SQL Injection
SQL injection vulnerability in the verify_email function in Woltlab Burning Board 2.x and earlier allows remote attacker
23RISCO
abrir ↗VulnCheck XDB
local
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RISCO
abrir ↗GitHub PoC★ 293
Win32k LPE vulnerability used in APT attack
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RISCO
abrir ↗Metasploit300
Windows ClientCopyImage Win32k Exploit
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local
98RISCO
abrir ↗Metasploit500
Adobe Flash Player Drawing Fill Shader Memory Corruption
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466
60RISCO
abrir ↗Metasploit500
Adobe Flash Player ShaderJob Buffer Overflow
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
60RISCO
abrir ↗Exploit-DB
D-Link DSL-500B Gen 2 - URL Filter Configuration Panel Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use
75RISCO
abrir ↗Exploit-DB
D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated use
75RISCO
abrir ↗Exploit-DB
SynTail 1.5 Build 566 - Multiple Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Sy
23RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.