Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
GitHub PoC★ 18
RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗VulnCheck XDB
local
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗Exploit-DB
Microsoft Windows - 'HTTP.sys' (PoC) (MS15-034)
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apport/Abrt (Ubuntu / Fedora) - Local Privilege Escalation
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Abrt (Fedora 21) - Race Condition
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apport/Abrt (Ubuntu / Fedora) - Local Privilege Escalation
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Abrt (Fedora 21) - Race Condition
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac
38RISCO
abrir ↗Exploit-DB
Samsung iPOLiS - ReadConfigValue Remote Code Execution
Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote
23RISCO
abrir ↗Metasploit600
ABRT raceabrt Privilege Escalation
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Adobe Flash Player - casi32 Integer Overflow (Metasploit)
Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and bef
60RISCO
abrir ↗Exploit-DB
Samba < 3.6.2 (x86) - Denial of Service (PoC)
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1
60RISCO
abrir ↗Exploit-DB
Linux Kernel 3.13/3.14 (Ubuntu) - 'splice()' System Call Local Denial of Service
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restrictio
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
ProFTPd 1.3.5 - File Copy
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX - 'Rootpipe' Local Privilege Escalation (Metasploit)
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Lenovo System Update - Local Privilege Escalation (Metasploit)
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allo
38RISCO
abrir ↗Metasploit600
Wordpress N-Media Website Contact Form Upload Vulnerability
Website Contact Form With File Upload <= 1.3.4 - Arbitrary File Upload
63RISCO
abrir ↗Metasploit600
Lenovo System Update Privilege Escalation
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allo
38RISCO
abrir ↗GitHub PoC★ 2
Docker simulating cve-2015-2208 vulnerability
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she
50RISCO
abrir ↗GitHub PoC★ 2
Proof of Concept OS X Application for RootPipe Privilege Escalation Vulnerability (CVE-2015-1130)
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗GitHub PoC★ 6
Metasploit modules and payload generation files from my Houston Perl Mongers talk about this vulnerability.
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use
60RISCO
abrir ↗VulnCheck XDB
local
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗Metasploit500
Apple OS X Rootpipe Privilege Escalation
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apple Mac OSX < 10.7.5/10.8.2/10.9.5/10.10.2 - 'Rootpipe' Local Privilege Escalation
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o
86RISCO
abrir ↗Metasploit300
Apple OSX/iOS/Windows Safari Non-HTTPOnly Cookie Theft
WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not
18RISCO
abrir ↗Exploit-DB✓ VexDay Proof
SolarWinds Firewall Security Manager 6.6.5 - Client Session Handling (Metasploit)
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privile
60RISCO
abrir ↗Metasploit300
Archer C7 Directory Traversal Vulnerability
Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before
100RISCO
abrir ↗Exploit-DB
WordPress Plugin Shareaholic 7.6.0.3 - Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in admin.php in the Shareaholic plugin before 7.6.1.0 for WordPress allows remo
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Novell ZENworks Configuration Management 11.3.1 - Remote Code Execution
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
60RISCO
abrir ↗Metasploit600
Novell ZENworks Configuration Management Arbitrary File Upload
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
JBoss Seam 2 - Arbitrary File Upload / Execution (Metasploit)
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.