Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.409exploits catalogados

37.196CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.478Referência 23.664GitHub PoC 15.347VulnCheck XDB 9.003Nuclei 4.415Metasploit 3.502✓ só verificadosrecentes populares risco

24.478 exploits

Exploit-DB✓ VexDay Proof

Apache mod_cgi - 'Shellshock' Remote Command Injection

CVE-2014-6278HIGHsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

100RISCO

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-7196—webappscgi06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-7169CRITICALsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-7227—webappscgi06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Apache mod_cgi - 'Shellshock' Remote Command Injection

CVE-2014-6271CRITICALsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-6271CRITICALsob ataquewebappscgi06 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-3671—webappscgi06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-3671—remotelinux06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-7910—remotelinux06 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3671—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-62771—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3659—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-6271CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7169CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7227—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7910—remotelinux04 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7196—remotelinux04 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-3671—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7186—remotelinux02 out 2014

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

35RISCO

Exploit-DB✓ VexDay Proof

PHPCompta/NOALYSS 6.7.1 5638 - Remote Command Execution

CVE-2014-6389—webappsphp02 out 2014

backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7196—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7169CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB

Moab < 7.2.9 - Authentication Bypass

CVE-2014-5300—webappsmultiple02 out 2014

Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersona

23RISCO

Exploit-DB✓ VexDay Proof

TestLink 1.9.11 - Multiple SQL Injections

CVE-2014-5308—webappsphp02 out 2014

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL comm

23RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7196—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-62771—remotelinux02 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

TeamSpeak Client 3.0.14 - Buffer Overflow

CVE-2014-7221—doswindows02 out 2014

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and

28RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-6278HIGHsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

100RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7227—remotelinux02 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Bacula-Web 5.2.10 - 'joblogs.php?jobid' SQL Injection

CVE-2014-8295—webappsphp02 out 2014

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.