Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados
35.420CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentespopularesrisco
14.131 exploits
GitHub PoC★ 4
phpMyAdmin 3.3.X and 3.4.X - Local File Inclusion
CVE-2011-4107—19 abr 2017
The simplexml_load_string function in the XML import plug-in (libraries/import/xml.php) in phpMyAdmin 3.4.x before 3.4.7
28RISCO
abrir ↗
GitHub PoC★ 13
Quick and dirty fix to OLE2 executing code via .hta
CVE-2017-0199HIGHsob ataqueransomware18 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗
GitHub PoC
Exploit developed by me for CVE-2017-5633.
CVE-2017-5633—18 abr 2017
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow
23RISCO
abrir ↗
GitHub PoC★ 1
CVE-2011-3368 exploit code
CVE-2011-3368—18 abr 2017
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does
60RISCO
abrir ↗
GitHub PoC★ 23
Proof of concept exploit for CVE-2017-3599
CVE-2017-3599—18 abr 2017
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t
45RISCO
abrir ↗
GitHub PoC★ 724
Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
CVE-2017-0199HIGHsob ataqueransomware17 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗
GitHub PoC★ 2
homjxi0e/CVE-2017-0108
CVE-2017-0108—15 abr 2017
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 20
35RISCO
abrir ↗
GitHub PoC
homjxi0e/CVE-2016-7255
CVE-2016-7255HIGHsob ataque15 abr 2017
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RISCO
abrir ↗
GitHub PoC★ 7
Addressbar spoofing through blob URL (Firefox browser). An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by blob: as the protocol, leading to user confusion and further spoofing attacks.
CVE-2017-5415—14 abr 2017
An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leadin
28RISCO
abrir ↗
GitHub PoC★ 12
SyFi/cve-2017-0199
CVE-2017-0199HIGHsob ataqueransomware13 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗
GitHub PoC
ryhanson/CVE-2017-0199
CVE-2017-0199HIGHsob ataqueransomware13 abr 2017
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window
100RISCO
abrir ↗
GitHub PoC
homjxi0e/cve-2017-7269
CVE-2017-7269CRITICALsob ataque13 abr 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 213
CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC
CVE-2017-3881CRITICALsob ataque10 abr 2017
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software co
100RISCO
abrir ↗
GitHub PoC★ 4
Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7.
CVE-2017-6971—10 abr 2017
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comma
28RISCO
abrir ↗
GitHub PoC★ 10
Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability
CVE-2017-5638CRITICALsob ataqueransomware09 abr 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC★ 5
Ruby Exploit for IIS 6.0 Buffer Overflow (CVE-2017-7269)
CVE-2017-7269CRITICALsob ataque06 abr 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 92
iis6 exploit 2017 CVE-2017-7269
CVE-2017-7269CRITICALsob ataque05 abr 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC
Poc for iis6.0
CVE-2017-7269CRITICALsob ataque30 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC
whiteHat001/cve-2017-7269picture
CVE-2017-7269CRITICALsob ataque30 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 134
fixed msf module for cve-2017-7269
CVE-2017-7269CRITICALsob ataque30 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 89
CVE-2017-7269 回显PoC ,用于远程漏洞检测..
CVE-2017-7269CRITICALsob ataque29 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 22
An exploit for Microsoft IIS 6.0 CVE-2017-7269
CVE-2017-7269CRITICALsob ataque29 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 1
exec 8 bytes command
CVE-2017-7269CRITICALsob ataque29 mar 2017
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
GitHub PoC★ 2
Struts2 RCE CVE-2017-5638 CLI shell
CVE-2017-5638CRITICALsob ataqueransomware28 mar 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC
mcassano/cve-2017-5638
CVE-2017-5638CRITICALsob ataqueransomware26 mar 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC
CVE-2017-5638
CVE-2017-5638CRITICALsob ataqueransomware23 mar 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC★ 6
k0keoyo/CVE-2017-0038-EXP-C-JS
CVE-2017-0038—22 mar 2017
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows
45RISCO
abrir ↗
GitHub PoC
ottimo/burp-alfresco-referer-proxy-cve-2014-9301
CVE-2014-9301—21 mar 2017
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows
23RISCO
abrir ↗
GitHub PoC★ 21
st2-046-poc CVE-2017-5638
CVE-2017-5638CRITICALsob ataqueransomware21 mar 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC★ 1
S2-046|S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）
CVE-2017-5638CRITICALsob ataqueransomware21 mar 2017
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
← anteriorpágina 458 / 472próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.