Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados
32.195CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentespopularesrisco
22.786 exploits
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - 'bpf' Heap Overflow
CVE-2017-2482—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fsevents Device
CVE-2017-2490—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple macOS Kernel 10.12.2 (16C67) - 'AppleIntelCapriController::GetLinkConfig' Code Execution Due to Lack of Bounds Checking
CVE-2017-2443—04 abr 2017
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph
23RISCO
abrir ↗
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - SIOCSIFORDER Socket ioctl Memory Corruption Due to Bad Bounds Checking
CVE-2017-2473—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple Webkit - 'JSCallbackData' Universal Cross-Site Scripting
CVE-2017-2442—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu
23RISCO
abrir ↗
Exploit-DB
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
CVE-2017-2367—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple WebKit 10.0.2 - HTMLInputElement Use-After-Free
CVE-2017-2454—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - SIOCGIFORDER Socket ioctl Off-by-One Memory Corruption
CVE-2017-2474—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple WebKit 10.0.2 (12602.3.12.0.1_ r210800) - 'constructJSReadableStreamDefaultReader' Type Confusion
CVE-2017-2457—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issu
23RISCO
abrir ↗
Exploit-DB
Apple WebKit - 'ComposedTreeIterator::traverseNextInShadowTree' Use-After-Free
CVE-2017-2466—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple macOS Kernel 10.12.3 (16D32) - 'audit_pipe_open' Off-by-One Memory Corruption
CVE-2017-2483—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriController::getDisplayPipeCapability
CVE-2017-2489—04 abr 2017
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graph
23RISCO
abrir ↗
Exploit-DB
Broadcom Wi-Fi SoC - 'dhd_handle_swc_evt' Heap Overflow
CVE-2017-0569—04 abr 2017
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execu
23RISCO
abrir ↗
Exploit-DB
Apple WebKit - 'FormSubmission::create' Use-After-Free
CVE-2017-2460—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple WebKit - 'WebCore::toJS' Use-After-Free
CVE-2017-2476—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn
CVE-2017-2472—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple WebKit 10.0.2(12602.3.12.0.1) - 'Frame::setDocument (1)' Universal Cross-Site Scripting
CVE-2017-2364—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. The
23RISCO
abrir ↗
Exploit-DB
Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow
CVE-2017-0561—04 abr 2017
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
35RISCO
abrir ↗
Exploit-DB
Broadcom Wi-Fi SoC - Heap Overflow 'wlc_tdls_cal_mic_chk' Due to Large RSN IE in TDLS Setup Confirm Frame
CVE-2017-0561—04 abr 2017
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
35RISCO
abrir ↗
Exploit-DB
Apple WebKit - Negative-Size memmove in HTMLFormElement
CVE-2017-2459—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple macOS/iOS Kernel 10.12.3 (16D32) - Bad Locking in necp_open Use-After-Free
CVE-2017-2478—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS b
23RISCO
abrir ↗
Exploit-DB
Apple WebKit 10.0.2 (12602.3.12.0.1) - 'disconnectSubframes' Universal Cross-Site Scripting
CVE-2017-2445—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS bef
23RISCO
abrir ↗
Exploit-DB
Apple WebKit - 'table' Use-After-Free
CVE-2017-2471—04 abr 2017
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS
23RISCO
abrir ↗
Exploit-DB
Apache Tomcat 6/7/8/9 - Information Disclosure
CVE-2016-6816—04 abr 2017
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.
35RISCO
abrir ↗
Exploit-DB
Bluecoat ASG 6.6/CAS 1.3 - OS Command Injection (Metasploit)
CVE-2016-9091—03 abr 2017
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
28RISCO
abrir ↗
Exploit-DB
Moxa AWK-3131A 1.4 < 1.7 - 'Username' OS Command Injection
CVE-2017-14459CRITICAL03 abr 2017
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK
53RISCO
abrir ↗
Exploit-DB
Bluecoat ASG 6.6/CAS 1.3 - Local Privilege Escalation (Metasploit)
CVE-2016-9091—03 abr 2017
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susc
28RISCO
abrir ↗
Exploit-DB
BackBox OS - Denial of Service
CVE-2017-7397—02 abr 2017
BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packet
28RISCO
abrir ↗
Exploit-DB
Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
CVE-2017-6884HIGHsob ataqueransomware02 abr 2017
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul
83RISCO
abrir ↗
Exploit-DB
Pixie 1.0.4 - Arbitrary File Upload
CVE-2017-7402—02 abr 2017
Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/ind
23RISCO
abrir ↗
← anteriorpágina 141 / 760próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.