Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
Apache mod_cgi - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection
20RISCO
abrir ↗GitHub PoC★ 7
Repository for CVE-2014-4936 POC code.
The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)
43RISCO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗GitHub PoC★ 3
Libsafe - Safety Check Bypass Vulnerability (Proof of Concept Exploit & Time Randomization to Thwart It)
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass li
23RISCO
abrir ↗Metasploit300
Android Open Source Platform (AOSP) Browser UXSS
The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribu
23RISCO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗Exploit-DB
OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC★ 11
Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB
GNU bash 4.3.11 - Environment Variable dhclient
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB
GNU bash 4.3.11 - Environment Variable dhclient
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
20RISCO
abrir ↗Exploit-DB
GNU bash 4.3.11 - Environment Variable dhclient
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)
20RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.