Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

24.443 exploits

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-7169CRITICALsob ataquewebappscgi06 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB✓ VexDay Proof

Apache mod_cgi - 'Shellshock' Remote Command Injection

CVE-2014-6278HIGHsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

100RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-62771—remotelinux06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-7169CRITICALsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-62771—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7196—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3671—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3659—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7910—remotelinux04 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7169CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7227—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-6271CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-3659—remotelinux02 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

TeamSpeak Client 3.0.14 - Buffer Overflow

CVE-2014-7222—doswindows02 out 2014

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (a

28RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-3671—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-6271CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7227—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7187—remotelinux02 out 2014

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers t

35RISCO

Exploit-DB

Moab < 7.2.9 - Authentication Bypass

CVE-2014-5300—webappsmultiple02 out 2014

Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersona

23RISCO

Exploit-DB✓ VexDay Proof

HP Network Node Manager I - PMD Buffer Overflow (Metasploit)

CVE-2014-2624—remotelinux02 out 2014

Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute ar

50RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-3659—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-6278HIGHsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

100RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7186—remotelinux02 out 2014

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

35RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-6271CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-62771—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-62771—remotelinux02 out 2014

20RISCO

Exploit-DB

Rejetto HTTP File Server (HFS) 2.3a/2.3b/2.3c - Remote Command Execution

CVE-2014-7226—webappswindows02 out 2014

The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary

23RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7196—remotelinux02 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

TestLink 1.9.11 - Multiple SQL Injections

CVE-2014-5308—webappsphp02 out 2014

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL comm

23RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7196—remotelinux02 out 2014

20RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.