Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.991exploits catalogados
40.452CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.240Exploit-DB 24.488GitHub PoC 18.044VulnCheck XDB 10.121Nuclei 4.561Metasploit 3.537✓ só verificadosrecentespopularesrisco
86.991 exploits
Exploit-DB✓ VexDay Proof
Bash - 'Shellshock' Environment Variables Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RISCO
abrir ↗GitHub PoC★ 46
Python Scanner for "ShellShock" (CVE-2014-6271)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC
rrreeeyyy/cve-2014-6271-spec
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC
Chef cookbook that will fail if bash vulnerability found per CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RISCO
abrir ↗GitHub PoC★ 1
Written fro CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB
Cart Engine 3.0 - Multiple Vulnerabilities
Open redirect vulnerability in the redir function in includes/function.php in C97net Cart Engine before 4.0 allows remot
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
20RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RISCO
abrir ↗Metasploit600
Wordpress InfusionSoft Upload Vulnerability
The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows
50RISCO
abrir ↗GitHub PoC
a auto script to fix CVE-2014-6271 bash vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC
mattclegg/CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC
Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - 'Shellshock' Environment Variable Command Injection
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
GNU Bash - Environment Variable Command Injection (Metasploit)
20RISCO
abrir ↗GitHub PoC★ 6
Patch for CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB
Restaurant Script (PizzaInn Project) - Persistent Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in register-exec.php in Restaurant Script (PizzaInn_Project) 1.0.0 a
23RISCO
abrir ↗GitHub PoC
patched-bash-4.3 for CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Advantech Webaccess - dvs.ocx GetColor Buffer Overflow (Metasploit)
Advantech WebAccess Stack-Based Buffer Overflow
68RISCO
abrir ↗GitHub PoC
Collected fixes for bash CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB
webEdition 6.3.8.0 (SVN-Revision: 6985) - Directory Traversal
Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated
43RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.