Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados

32.219CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.023GitHub PoC 13.334VulnCheck XDB 8.195Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

22.786 exploits

Exploit-DB

BMC Track-It! 11.4 - Multiple Vulnerabilities

CVE-2016-6598—28 set 2015

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on

28RISCO

abrir ↗

Exploit-DB

Watchguard XCS - Remote Command Execution (Metasploit)

CVE-2015-5452—28 set 2015

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitr

23RISCO

abrir ↗

Exploit-DB

Kaseya Virtual System Administrator (VSA) 7.0 < 9.1 - (Authenticated) Arbitrary File Upload

CVE-2015-6589—28 set 2015

Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before

28RISCO

abrir ↗

Exploit-DB

Adobe Acrobat Reader - AFParseDate JavaScript API Restrictions Bypass

CVE-2015-3073—28 set 2015

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inten

28RISCO

abrir ↗

Exploit-DB

vTiger CRM 6.3.0 - (Authenticated) Remote Code Execution

CVE-2015-6000—28 set 2015

Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger

50RISCO

abrir ↗

Exploit-DB

Mango Automation 2.6.0 - Multiple Vulnerabilities

CVE-2015-6493—28 set 2015

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 bu

23RISCO

abrir ↗

Exploit-DB

Mango Automation 2.6.0 - Multiple Vulnerabilities

CVE-2015-7902—28 set 2015

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed

23RISCO

abrir ↗

Exploit-DB

FortiManager 5.2.2 - Persistent Cross-Site Scripting

CVE-2015-8038—25 set 2015

Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befor

23RISCO

abrir ↗

Exploit-DB

X2Engine 4.2 - Arbitrary File Upload

CVE-2015-5074—25 set 2015

Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php

23RISCO

abrir ↗

Exploit-DB

X2Engine 4.2 - Cross-Site Request Forgery

CVE-2015-5075—25 set 2015

Cross-site request forgery (CSRF) vulnerability in X2Engine X2CRM before 5.2 allows remote attackers to hijack the authe

23RISCO

abrir ↗

Exploit-DB

FortiManager 5.2.2 - Persistent Cross-Site Scripting

CVE-2015-8037—25 set 2015

Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befor

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - 'NtGdiBitBlt' Buffer Overflow (MS15-097)

CVE-2015-2512—24 set 2015

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

23RISCO

abrir ↗

Exploit-DB

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

CVE-2015-4148—24 set 2015

The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not

28RISCO

abrir ↗

Exploit-DB

refbase 0.9.6 - Multiple Vulnerabilities

CVE-2015-7382—23 set 2015

SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers

23RISCO

abrir ↗

Exploit-DB

refbase 0.9.6 - Multiple Vulnerabilities

CVE-2015-7381—23 set 2015

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6

23RISCO

abrir ↗

Exploit-DB

Cisco AnyConnect 3.1.08009 - Local Privilege Escalation (via DMG Install Script)

CVE-2015-6306—23 set 2015

Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and Linux does not verify pathnames before installation actions,

23RISCO

abrir ↗

Exploit-DB

refbase 0.9.6 - Multiple Vulnerabilities

CVE-2015-6008—23 set 2015

install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands

23RISCO

abrir ↗

Exploit-DB

refbase 0.9.6 - Multiple Vulnerabilities

CVE-2015-6009—23 set 2015

Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to e

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - Use-After-Free with Cursor Object (MS15-097)

CVE-2015-2517—22 set 2015

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - Bitmap Handling Use-After-Free (MS15-061) (1)

CVE-2015-1722—22 set 2015

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - 'win32k!vSolidFillRect' Buffer Overflow (MS15-061)

CVE-2015-1725—22 set 2015

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - Use-After-Free with Printer Device Contexts (MS15-097)

CVE-2015-2507—22 set 2015

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - 'SURFOBJ' Null Pointer Dereference (MS15-061)

CVE-2015-1725—22 set 2015

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

CVE-2015-1727—22 set 2015

Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows S

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - Bitmap Handling Use-After-Free (MS15-061) (2)

CVE-2015-1722—22 set 2015

Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista S

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Kernel - 'NtGdiStretchBlt' Pool Buffer Overflow (MS15-097)

CVE-2015-2512—22 set 2015

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Window

23RISCO

abrir ↗

Exploit-DB

Apple qlmanage - SceneKit::daeElement::setElementName Heap Overflow

CVE-2015-3783—22 set 2015

SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (me

35RISCO

abrir ↗

Exploit-DB

h5ai < 0.25.0 - Unrestricted Arbitrary File Upload

CVE-2015-3203—22 set 2015

Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by upload

23RISCO

abrir ↗

Exploit-DB

Apple Mac OSX Regex Engine (TRE) - Integer Signedness / Overflow

CVE-2015-3798—22 set 2015

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute

28RISCO

abrir ↗

Exploit-DB

Cisco AnyConnect Secure Mobility Client 3.1.08009 - Local Privilege Escalation

CVE-2015-6305—22 set 2015

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConne

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.