Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
GitHub PoC★ 1
Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability
CVE-2015-0235—28 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
GitHub PoC★ 1
furyutei/CVE-2015-0235_GHOST
CVE-2015-0235—28 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
Metasploit300
ManageEngine Multiple Products Arbitrary File Download
CVE-2014-7863—28 jan 2015
The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O
60RISCO
abrir ↗
Metasploit600
Oracle Weblogic Server Deserialization RCE - Raw Object
CVE-2015-4852CRITICALsob ataque28 jan 2015
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
100RISCO
abrir ↗
Metasploit300
ManageEngine Multiple Products Arbitrary Directory Listing
CVE-2014-7863—28 jan 2015
The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, O
60RISCO
abrir ↗
Metasploit500
Exim GHOST (glibc gethostbyname) Buffer Overflow
CVE-2015-0235—27 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
GitHub PoC★ 6
Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security
CVE-2015-0235—27 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
GitHub PoC★ 15
Ansible playbook to check vulnerability for CVE-2015-0235
CVE-2015-0235—27 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
GitHub PoC★ 3
A chef cookbook to test the GHOST vulnerability
CVE-2015-0235—27 jan 2015
Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,
60RISCO
abrir ↗
Exploit-DB
Symantec Data Center Security - Multiple Vulnerabilities
CVE-2014-9226—webappsmultiple26 jan 2015
The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security:
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Android WiFi-Direct - Denial of Service
CVE-2014-0997—dosandroid26 jan 2015
WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used i
23RISCO
abrir ↗
Exploit-DB
jclassifiedsmanager - Multiple Vulnerabilities
CVE-2015-1478—webappsmultiple26 jan 2015
Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attac
23RISCO
abrir ↗
GitHub PoC★ 94
Gain privileges:system -> root,as a part of https://github.com/retme7/CVE-2014-7911_poc
CVE-2014-4322—26 jan 2015
drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr
23RISCO
abrir ↗
Exploit-DB
jclassifiedsmanager - Multiple Vulnerabilities
CVE-2015-1477—webappsmultiple26 jan 2015
SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execu
23RISCO
abrir ↗
Exploit-DB
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation
CVE-2014-9597—localwindows26 jan 2015
The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to ex
23RISCO
abrir ↗
Exploit-DB
VideoLAN VLC Media Player 2.1.5 - Write Access Violation
CVE-2014-9598—localwindows26 jan 2015
The picture_Release function in misc/picture.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arb
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
CVE-2015-1373—webappsphp26 jan 2015
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inje
23RISCO
abrir ↗
Exploit-DB
Symantec Data Center Security - Multiple Vulnerabilities
CVE-2014-9225—webappsmultiple26 jan 2015
The ajaxswing webui in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symante
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
CVE-2015-1372—webappsphp26 jan 2015
SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p
23RISCO
abrir ↗
Exploit-DB
Symantec Data Center Security - Multiple Vulnerabilities
CVE-2014-9224—webappsmultiple26 jan 2015
Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management serve
23RISCO
abrir ↗
Exploit-DB
Symantec Data Center Security - Multiple Vulnerabilities
CVE-2014-7289—webappsmultiple26 jan 2015
SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
CVE-2015-1371—webappsphp26 jan 2015
Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code b
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
ferretCMS 1.0.4-alpha - Multiple Vulnerabilities
CVE-2015-1374—webappsphp26 jan 2015
Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers
23RISCO
abrir ↗
Exploit-DB
Comodo Backup 4.4.0.0 - Null Pointer Dereference Privilege Escalation
CVE-2014-9633—localwindows26 jan 2015
The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device ha
23RISCO
abrir ↗
Exploit-DB
ManageEngine ServiceDesk Plus 9.0 < Build 9031 - User Privileges Management
CVE-2015-1480—webappsjsp26 jan 2015
ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive tic
23RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
OP5 5.3.5/5.4.0/5.4.2/5.5.0/5.5.1 - 'license.php' Remote Command Execution (Metasploit)
CVE-2012-0261—webappsmultiple25 jan 2015
license.php in system-portal before 1.6.2 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execu
60RISCO
abrir ↗
Exploit-DB
NPDS CMS REvolution-13 - SQL Injection
CVE-2015-1400—webappsphp24 jan 2015
SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL command
23RISCO
abrir ↗
Exploit-DB
Exif Pilot 4.7.2 - Buffer Overflow (SEH)
CVE-2015-1362—doswindows22 jan 2015
Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote attackers to execute arbitrary co
23RISCO
abrir ↗
Exploit-DB
ecommerceMajor - SQL Injection / Authentication Bypass
CVE-2015-1476—webappsphp22 jan 2015
Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL comman
23RISCO
abrir ↗
Exploit-DB
ManageEngine ServiceDesk Plus 9.0 - SQL Injection
CVE-2015-1479—webappsjsp22 jan 2015
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 buil
23RISCO
abrir ↗
← anteriorpágina 1191 / 2.900próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.