Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.432exploits catalogados
34.424CVEs com exploração pública
24.695testados em laboratório
24.443 exploits
Exploit-DB
Netsweeper 4.0.8 - SQL Injection / Authentication Bypass
CVE-2014-9605webappsphp21 ago 2015
WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass aut
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
CVE-2015-2456doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - 'mso.dll' Use-After-Free (MS15-081)
CVE-2015-2467doswindows21 ago 2015
Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Offic
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - 'OGL.dll' DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
CVE-2015-2431doswindows21 ago 2015
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lyn
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - 'wwlib.dll' Type Confusion (MS15-081)
CVE-2015-2469doswindows21 ago 2015
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbit
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
CVE-2015-2455doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DBVexDay Proof
Konica Minolta FTP Utility 1.0 - Remote Denial of Service (PoC)
CVE-2015-7767doswindows21 ago 2015
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.DLL' Write to Uninitialized Address Due to Malformed CFF Table
CVE-2015-2432doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DB
Netsweeper 4.0.8 - Arbitrary File Upload / Execution
CVE-2014-9619webappsphp21 ago 2015
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - MSPTLS Heap Index Integer Underflow (MS15-081)
CVE-2015-2470doswindows21 ago 2015
Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 201
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
CVE-2015-2464doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
CVE-2015-2462doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.DLL' CFF table (ATMFD+0x34072 / ATMFD+0x3407b) Invalid Memory Access
CVE-2015-2459doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DB
Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities
CVE-2015-5437webappsxml20 ago 2015
20RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash (Linux x64) - Bad Dereference at 0x23c
CVE-2015-5546doslinux_x86-6419 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - '.SWF' Out-of-Bounds Memory Read (1)
CVE-2015-5131doswindows19 ago 2015
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Out-of-Bounds Memory Read While Parsing a Mutated '.TTF' File Embedded in SWF
CVE-2015-5133doswindows19 ago 2015
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - '.SWF' Out-of-Bounds Memory Read (2)
CVE-2015-5132doswindows19 ago 2015
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash AS2 - DisplacementMapFilter.mapBitmap Use-After-Free (2)
CVE-2015-5127doswindows19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - URL Resource Use-After-Free
CVE-2015-4430doswindows19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Drawing Methods 'this' Use-After-Free
CVE-2015-3137dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - createTextField Use-After-Free
CVE-2015-5556dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Overflow in ID3 Tag Parsing
CVE-2015-5560dosmultiple19 ago 2015
Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISCO
abrir
Exploit-DBVexDay Proof
Flash - Uninitialized Stack Variable MPD Parsing Memory Corruption
CVE-2015-3089doswindows19 ago 2015
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Pointer Crash in Drawing and Bitmap Handling
CVE-2015-5544doslinux19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - 'Setting' Use-After-Free
CVE-2015-5134dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - FileReference Class Type Confusion
CVE-2015-5558dosmultiple19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Display List Handling Use-After-Free
CVE-2015-3124doswindows19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISCO
abrir
Exploit-DBVexDay Proof
Flash Boundless Tunes - Universal SOP Bypass Through ActionSctipt's Sound Object
CVE-2015-5116remotemultiple19 ago 2015
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481
28RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Pointer Crash After Continuing Slow Script
CVE-2015-5545doslinux19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
anteriorpágina 186 / 815próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.