Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
Free MP3 CD Ripper 2.6 2.8 - '.wav' File Buffer Overflow (SEH)
Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted rem
50RISCO
abrir ↗Exploit-DB
usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) - Local Privilege Escalation
usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubu
23RISCO
abrir ↗Metasploit600
ProFTPD 1.3.5 Mod_Copy Command Execution
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RISCO
abrir ↗Metasploit600
GoAutoDial 3.3 Authentication Bypass / Command Injection
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute
50RISCO
abrir ↗Metasploit600
GoAutoDial 3.3 Authentication Bypass / Command Injection
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb
60RISCO
abrir ↗Exploit-DB
WordPress Plugin Community Events 1.3.5 - SQL Injection
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Creative Contact Form - Arbitrary File Upload (Metasploit)
Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery
60RISCO
abrir ↗Exploit-DB
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arb
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - copyPixelsToByteArray Integer Overflow (Metasploit)
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arb
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAu
28RISCO
abrir ↗GitHub PoC★ 1
Tool for exploit CVE-2015-3306
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RISCO
abrir ↗Exploit-DB
WordPress Plugin Tune Library 1.5.4 - SQL Injection
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File Retrieval/Deletion
Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDra
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin Reflex Gallery - Arbitrary File Upload (Metasploit)
Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 f
50RISCO
abrir ↗Exploit-DB
Apple Mac OSX - Local Denial of Service
The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denia
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GoAutoDial CE 3.3-1406088000 - Authentication Bypass / Arbitrary File Upload / Command Injection
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute
50RISCO
abrir ↗Exploit-DB
ADB - Backup Archive File Overwrite Directory Traversal
Directory traversal vulnerability in the Android debug bridge (aka adb) in Android 4.0.4 allows physically proximate att
23RISCO
abrir ↗Exploit-DB
AZBB < 1.0.07d - Multiple Vulnerabilities
Multiple directory traversal vulnerabilities in AZ Bulletin board (AZbb) before 1.0.08 allow (1) remote authenticated us
23RISCO
abrir ↗Exploit-DB
AZBB < 1.0.07d - Multiple Vulnerabilities
PHP remote file inclusion vulnerability in main_index.php in AZ Bulletin Board (AZbb) 1.0.07a through 1.0.07c allows rem
23RISCO
abrir ↗Exploit-DB
Apport 2.14.1 (Ubuntu 14.04.2) - Local Privilege Escalation
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf
38RISCO
abrir ↗Exploit-DB
Oracle - Outside-In '.DOCX' File Parsing Memory Corruption
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.
23RISCO
abrir ↗GitHub PoC★ 4
Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class.
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf
38RISCO
abrir ↗Exploit-DB
Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)
Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and ear
23RISCO
abrir ↗Exploit-DB
Oracle - Outside-In '.DOCX' File Parsing Memory Corruption
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.
23RISCO
abrir ↗VulnCheck XDB
denial-of-service
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISCO
abrir ↗GitHub PoC★ 2
CVE-2015-1635,MS15-034
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISCO
abrir ↗GitHub PoC★ 4
PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/
The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remo
60RISCO
abrir ↗Exploit-DB
Microsoft Windows - 'HTTP.sys' HTTP Request Parsing Denial of Service (MS15-034)
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.