Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

22.786 exploits

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6995—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6998—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6996—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6999—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6997—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6994—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO

23RISCO

Exploit-DB

Apple iOS < 10.3.1 - Kernel

CVE-2017-6979—26 ago 2017

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS

23RISCO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12953—23 ago 2017

The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial

23RISCO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12951—23 ago 2017

The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a den

23RISCO

Exploit-DB

Wireless Repeater BE126 - Local File Inclusion

CVE-2017-8770—23 ago 2017

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys

28RISCO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12954—23 ago 2017

The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of

23RISCO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12952—23 ago 2017

The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer d

23RISCO

Exploit-DB

libgig 4.0.0 (LinuxSampler) - Multiple Vulnerabilities

CVE-2017-12950—23 ago 2017

The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL p

23RISCO

Exploit-DB

Automated Logic WebCTRL 6.5 - Unrestricted File Upload / Remote Code Execution

CVE-2017-9650—22 ago 2017

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL

23RISCO

Exploit-DB

Automated Logic WebCTRL 6.5 - Local Privilege Escalation

CVE-2017-9644—22 ago 2017

An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan

23RISCO

Exploit-DB

Automated Logic WebCTRL 6.1 - Path Traversal / Arbitrary File Write

CVE-2017-9640—22 ago 2017

A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5;

23RISCO

Exploit-DB

IBM OpenAdmin Tool - SOAP welcomeServer PHP Code Execution (Metasploit)

CVE-2017-1092—22 ago 2017

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISCO

Exploit-DB

PHPMyWind 5.3 - Cross-Site Scripting

CVE-2017-12984—21 ago 2017

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.

23RISCO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12965—21 ago 2017

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa

28RISCO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12971—21 ago 2017

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or

23RISCO

Exploit-DB

Apache2Triad 1.5.4 - Multiple Vulnerabilities

CVE-2017-12970—21 ago 2017

Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati

23RISCO

Exploit-DB

PDF-XChange Viewer 2.5 Build 314.0 - Code Execution

CVE-2017-13056—21 ago 2017

The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code vi

23RISCO

Exploit-DB

Apple macOS Sierra 10.12.1 - 'IOFireWireFamily' FireWire Port Denial of Service

CVE-2016-7608—19 ago 2017

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireF

23RISCO

Exploit-DB

WebKitGTK 2.1.2 (Ubuntu 14.04) - Heap based Buffer Overflow

CVE-2014-1303—19 ago 2017

Heap-based buffer overflow in Apple Safari 7.0.2 allows remote attackers to execute arbitrary code and bypass a sandbox

35RISCO

Exploit-DB

Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution

CVE-2017-6327HIGHsob ataque18 ago 2017

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situ

83RISCO

Exploit-DB

NoviFlow NoviWare < NW400.2.6 - Multiple Vulnerabilities

CVE-2017-12785—18 ago 2017

The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi

28RISCO

Exploit-DB

ZKTime Web Software 2.0 - Cross-Site Request Forgery

CVE-2017-13129—18 ago 2017

Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hi

23RISCO

Exploit-DB

NoviFlow NoviWare < NW400.2.6 - Multiple Vulnerabilities

CVE-2017-12787—18 ago 2017

A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through N

28RISCO

Exploit-DB

NoviFlow NoviWare < NW400.2.6 - Multiple Vulnerabilities

CVE-2017-12786—18 ago 2017

Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40

28RISCO

Exploit-DB

QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities

CVE-2017-9978—18 ago 2017

On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.