Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
14.131 exploits
GitHub PoC
acidburnmi/CVE-2016-5195-master
CVE-2016-5195HIGHsob ataque06 dez 2017
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
GitHub PoC21
Better Exploit Code For CVE 2017 9805 apache struts
CVE-2017-9805HIGHsob ataque04 dez 2017
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISCO
abrir
GitHub PoC
chu1337/CVE-2017-1000117
CVE-2017-100011703 dez 2017
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
60RISCO
abrir
GitHub PoC
giovannidispoto/CVE-2017-13872-Patch
CVE-2017-1387230 nov 2017
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The is
50RISCO
abrir
GitHub PoC200
A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)
CVE-2017-100040529 nov 2017
The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside
23RISCO
abrir
GitHub PoC1
Tomcat 远程代码执行漏洞 Exploit
CVE-2017-12615HIGHsob ataqueransomware28 nov 2017
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISCO
abrir
GitHub PoC210
CVE-2017-12149 jboss反序列化 可回显
CVE-2017-12149CRITICALsob ataqueransomware28 nov 2017
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter
100RISCO
abrir
GitHub PoC1
CVE-2017-9805 - Exploit
CVE-2017-9805HIGHsob ataque28 nov 2017
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISCO
abrir
GitHub PoC2
Shadowshusky/CVE-2017-11882-
CVE-2017-11882HIGHsob ataqueransomware27 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC2
CVE-2015-4852 Oracle WebLogic Scanner
CVE-2015-4852CRITICALsob ataque25 nov 2017
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
100RISCO
abrir
GitHub PoC15
Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)
CVE-2017-9805HIGHsob ataque24 nov 2017
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISCO
abrir
GitHub PoC
CSC-pentest/cve-2017-11882
CVE-2017-11882HIGHsob ataqueransomware24 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC
# CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. ## Installation 1) Copy the cve_2017_11882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local/ 2) Copy the cve-2017-11882.rtf to /usr/share/metasploit-framework/data/exploits/ This module is a quick port to Metasploit and uses mshta.exe to execute the payload. There are better ways to implement this module and exploit but will update it as soon as I have the time.
CVE-2017-11882HIGHsob ataqueransomware24 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC3
Shellshock exploitation script that is able to upload and RCE using any vector due to its versatility.
CVE-2014-6271CRITICALsob ataque23 nov 2017
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir
GitHub PoC
CVE-2017-9430 Fix
CVE-2017-943022 nov 2017
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) o
28RISCO
abrir
GitHub PoC44
CVE-2017-11882 exploitation
CVE-2017-11882HIGHsob ataqueransomware22 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC
Grey-Li/CVE-2017-11882
CVE-2017-11882HIGHsob ataqueransomware22 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC34
CVE-2017-11882 File Generator PoC
CVE-2017-11882HIGHsob ataqueransomware21 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC22
CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)
CVE-2017-12149CRITICALsob ataqueransomware21 nov 2017
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter
100RISCO
abrir
GitHub PoC
CVE-2017-11882
CVE-2017-11882HIGHsob ataqueransomware21 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC330
CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
CVE-2017-11882HIGHsob ataqueransomware21 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC535
CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882
CVE-2017-11882HIGHsob ataqueransomware21 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC98
This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.
CVE-2017-11882HIGHsob ataqueransomware21 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC494
Proof-of-Concept exploits for CVE-2017-11882
CVE-2017-11882HIGHsob ataqueransomware20 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC3
zhouat/cve-2017-11882
CVE-2017-11882HIGHsob ataqueransomware19 nov 2017
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi
100RISCO
abrir
GitHub PoC67
CVE-2017-8917 - SQL injection Vulnerability Exploit in Joomla 3.7.0
CVE-2017-891719 nov 2017
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir
GitHub PoC2
Exploits CVE-2016-10033 and CVE-2016-10045
CVE-2016-10033CRITICALsob ataque19 nov 2017
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
100RISCO
abrir
GitHub PoC2
herbiezimmerman/2017-11-17-Maldoc-Using-CVE-2017-0199
CVE-2017-0199HIGHsob ataqueransomware17 nov 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir
GitHub PoC
Python exploit for CVE-2017-16806
CVE-2017-1680613 nov 2017
The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory
60RISCO
abrir
GitHub PoC160
Chrome < 62 uxss exploit (CVE-2017-5124)
CVE-2017-512413 nov 2017
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject
23RISCO
abrir
anteriorpágina 451 / 472próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.