Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

24.476 exploits

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8018—remotelinux13 dez 2016

Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8019—remotelinux13 dez 2016

Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and ea

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8017—remotelinux13 dez 2016

Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows a

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8020—remotelinux13 dez 2016

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earl

28RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8024—remotelinux13 dez 2016

Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VS

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8022—remotelinux13 dez 2016

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

28RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8025—remotelinux13 dez 2016

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authen

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8023—remotelinux13 dez 2016

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8016—remotelinux13 dez 2016

Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote

23RISCO

Exploit-DB✓ VexDay Proof

McAfee Virus Scan Enterprise for Linux 1.9.2 < 2.0.2 - Remote Code Execution

CVE-2016-8021—remotelinux13 dez 2016

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3

23RISCO

Exploit-DB✓ VexDay Proof

iOS 10.1.x - Certificate File Memory Corruption

CVE-2016-7626—dosios12 dez 2016

An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS be

23RISCO

Exploit-DB

Apache 2.4.23 mod_http2 - Denial of Service

CVE-2016-8740—doslinux12 dez 2016

The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2

45RISCO

Exploit-DB✓ VexDay Proof

Sophos Web Appliance 4.2.1.3 - DiagnosticTools Remote Command Injection (Metasploit)

CVE-2016-9554—webappslinux12 dez 2016

The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injectio

28RISCO

Exploit-DB✓ VexDay Proof

Sophos Web Appliance 4.2.1.3 - block/unblock Remote Command Injection (Metasploit)

CVE-2016-9553—webappsphp12 dez 2016

The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its w

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - IEFRAME CSelectionInteractButtonBehavior::_UpdateButtonLocation Use-After-Free (MS13-047)

CVE-2013-3111—doswindows12 dez 2016

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service

35RISCO

Exploit-DB

OpenSSL 1.1.0a/1.1.0b - Denial of Service

CVE-2016-7054—doslinux11 dez 2016

ChaCha20/Poly1305 heap-buffer-overflow

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (2)

CVE-2013-1306—doswindows09 dez 2016

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a cr

35RISCO

Exploit-DB

D-Link DI-524 - Cross-Site Request Forgery

CVE-2017-5633—webappshardware09 dez 2016

Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - MSHTML CDispNode::InsertSiblingNode Use-After-Free (MS13-037) (1)

CVE-2013-1309—doswindows09 dez 2016

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co

35RISCO

Exploit-DB

OpenSSH 7.2 - Denial of Service

CVE-2016-6515—doslinux07 dez 2016

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password a

35RISCO

Exploit-DB✓ VexDay Proof

Netgear R7000 - Command Injection

CVE-2016-6277HIGHsob ataquewebappscgi07 dez 2016

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.B

100RISCO

Exploit-DB

Cisco Unified Communications Manager 7/8/9 - Directory Traversal

CVE-2013-5528—webappshardware07 dez 2016

Directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager all

43RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - CDoc::ExecuteScriptUri Use-After-Free (MS13-009)

CVE-2013-0019—doswindows06 dez 2016

Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary co

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Edge - JSON.parse Info Leak

CVE-2016-7241—doswindows06 dez 2016

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of

45RISCO

Exploit-DB

Microsoft Edge - CBaseScriptable::PrivateQueryInterface Memory Corruption (MS16-068)

CVE-2016-3222—doswindows06 dez 2016

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

35RISCO

Exploit-DB✓ VexDay Proof

Linux Kernel 4.4.0 (Ubuntu 14.04/16.04 x86-64) - 'AF_PACKET' Race Condition Privilege Escalation

CVE-2016-8655—locallinux_x86-6406 dez 2016

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

Exploit-DB✓ VexDay Proof

Microsoft Internet Explorer 9 - 'jscript9' JavaScriptStackWalker Memory Corruption (MS15-056)

CVE-2015-1730—remotewindows06 dez 2016

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft Edge - CMarkup::EnsureDeleteCFState Use-After-Free (MS15-125)

CVE-2015-6168—doswindows06 dez 2016

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

35RISCO

Exploit-DB✓ VexDay Proof

Google Android - Inter-Process munmap with User-Controlled Size in android.graphics.Bitmap

CVE-2016-6707—remoteandroid06 dez 2016

An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 coul

23RISCO

Exploit-DB✓ VexDay Proof

Microsoft Event Viewer 1.0 - XML External Entity Injection

CVE-2019-0948MEDIUMlocalwindows05 dez 2016

Windows Event Viewer Information Disclosure Vulnerability

38RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.