Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

14.131 exploits

GitHub PoC★ 1

Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 software

CVE-2015-5477—04 ago 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISCO

abrir ↗

GitHub PoC★ 14

PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability

CVE-2015-5477—01 ago 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISCO

abrir ↗

GitHub PoC★ 64

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

CVE-2015-5477—31 jul 2015

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (

60RISCO

abrir ↗

GitHub PoC★ 3

A little Python tool for exploiting CVE-2015-1560 and CVE-2015-1561. Quick'n'dirty. Real dirty.

CVE-2015-1560—31 jul 2015

SQL injection vulnerability in the isUserAdmin function in include/common/common-Func.php in Centreon (formerly Merethis

23RISCO

abrir ↗

GitHub PoC★ 11

jvazquez-r7/CVE-2015-5119

CVE-2015-5119HIGHsob ataque29 jul 2015

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.

100RISCO

abrir ↗

GitHub PoC★ 15

Vulnerability as a service: showcasing CVS-2014-0160, a.k.a. Heartbleed

CVE-2014-0160HIGHsob ataque12 jul 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

GitHub PoC★ 22

Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

CVE-2014-6271CRITICALsob ataque11 jul 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC★ 6

A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug).

CVE-2014-6271CRITICALsob ataque26 jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC★ 1

This is an Android Application that helps you detect if your machine that run bash is vulnerable by CVE-2014-6271

CVE-2014-6271CRITICALsob ataque17 jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC

reading course

CVE-2014-6271CRITICALsob ataque10 jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC

redhatkaty/-cve-2010-3904-report

CVE-2010-3904HIGHsob ataque09 jun 2015

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the

91RISCO

abrir ↗

GitHub PoC

marstornado/cve-2014-0160-Yunfeng-Jiang

CVE-2014-0160HIGHsob ataque09 jun 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

GitHub PoC★ 2

weidongl74/cve-2015-2315-report

CVE-2015-2315—08 jun 2015

Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject

23RISCO

abrir ↗

GitHub PoC

system reading course

CVE-2014-6271CRITICALsob ataque06 jun 2015

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

abrir ↗

GitHub PoC

cve-2015-3043 flash exploit

CVE-2015-3043HIGHsob ataque21 mai 2015

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457

100RISCO

abrir ↗

GitHub PoC★ 13

Experiments related to CVE-2015-3456

CVE-2015-3456—17 mai 2015

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a

28RISCO

abrir ↗

GitHub PoC★ 293

Win32k LPE vulnerability used in APT attack

CVE-2015-1701HIGHsob ataqueransomware12 mai 2015

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local

98RISCO

abrir ↗

GitHub PoC

A checker (site and tool) for CVE-2014-0160. Software from @FiloSottile for iSC Inc..

CVE-2014-0160HIGHsob ataque08 mai 2015

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

GitHub PoC

:fire: A checker site for MS15-034 / CVE-2015-1635.

CVE-2015-1635CRITICALsob ataque05 mai 2015

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

GitHub PoC★ 10

Concurrent network scanner for CVE-2015-1635

CVE-2015-1635CRITICALsob ataque04 mai 2015

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

GitHub PoC

CVE-2012-1876 simple calc exploitation

CVE-2012-1876—03 mai 2015

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, does not properly handle objects in memory, which allo

50RISCO

abrir ↗

GitHub PoC

CVE-2012-4792 simple calc exploitation

CVE-2012-4792HIGHsob ataque03 mai 2015

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary cod

100RISCO

abrir ↗

GitHub PoC★ 2

Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution

CVE-2015-3306—26 abr 2015

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

abrir ↗

GitHub PoC★ 1

Tool for exploit CVE-2015-3306

CVE-2015-3306—21 abr 2015

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

abrir ↗

GitHub PoC★ 4

Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class.

CVE-2015-1318—17 abr 2015

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a craf

38RISCO

abrir ↗

GitHub PoC★ 4

PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/

CVE-2013-1488—16 abr 2015

The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remo

60RISCO

abrir ↗

GitHub PoC★ 2

CVE-2015-1635,MS15-034

CVE-2015-1635CRITICALsob ataque16 abr 2015

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

GitHub PoC★ 18

RootPipe (CVE-2015-1130) and Phoenix (CVE-2015-3673) vulnerability testing utility for Mac OS X 10.2.8 and later

CVE-2015-1130HIGHsob ataque15 abr 2015

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o

86RISCO

abrir ↗

GitHub PoC★ 2

Docker simulating cve-2015-2208 vulnerability

CVE-2015-2208—11 abr 2015

The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via she

50RISCO

abrir ↗

GitHub PoC★ 2

Proof of Concept OS X Application for RootPipe Privilege Escalation Vulnerability (CVE-2015-1130)

CVE-2015-1130HIGHsob ataque10 abr 2015

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o

86RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.