Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

85.566exploits catalogados

39.907CVEs com exploração pública

24.696testados em laboratório

Todos Referência 25.846Exploit-DB 24.488GitHub PoC 17.314VulnCheck XDB 9.877Nuclei 4.513Metasploit 3.528✓ só verificadosrecentes populares risco

85.566 exploits

GitHub PoC★ 1

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！

CVE-2020-0601HIGHsob ataque17 fev 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

GitHub PoC★ 41

Android privilege escalation via an use-after-free in binder.c

CVE-2019-2215HIGHsob ataque17 fev 2020

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

Metasploit600

Aerohive NetConfig 10.0r8a LFI and log poisoning to RCE

CVE-2020-16152—17 fev 2020

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0

30RISCO

Exploit-DB

MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation

CVE-2020-0683HIGHsob ataquelocalwindows17 fev 2020

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

71RISCO

GitHub PoC★ 1

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，复现了该漏洞和理解恶意软件自启动劫持原理。作为网络安全初学者，自己确实很菜，但希望坚持下去，一起加油！

CVE-2018-20250HIGHsob ataqueransomware17 fev 2020

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

GitHub PoC★ 30

这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！

CVE-2020-0601HIGHsob ataque17 fev 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

VulnCheck XDB

local

CVE-2019-2215HIGHsob ataque17 fev 2020

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

GitHub PoC★ 4

OpenSMTPD version 6.6.2 remote code execution exploit

CVE-2020-7247CRITICALsob ataque17 fev 2020

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

Exploit-DB✓ VexDay Proof

Anviz CrossChex - Buffer Overflow (Metasploit)

CVE-2019-12518—remotewindows17 fev 2020

Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.

50RISCO

VulnCheck XDB

initial-access

CVE-2016-4977—17 fev 2020

When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1

60RISCO

GitHub PoC★ 195

SQL Server Reporting Services(CVE-2020-0618)中的RCE

CVE-2020-0618CRITICALsob ataqueransomware15 fev 2020

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISCO

GitHub PoC★ 3

Hack The CCTV | DVRs; Credentials Exposed | CVE-2018-9995

CVE-2018-9995—15 fev 2020

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

VulnCheck XDB

initial-access

CVE-2018-9995—15 fev 2020

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

VulnCheck XDB

initial-access

CVE-2020-0618CRITICALsob ataqueransomware15 fev 2020

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page

100RISCO

GitHub PoC★ 1

POE code for CVE-2017-1000112 adapted to both funtion on a specific VM and Escape a Docker

CVE-2017-1000112—14 fev 2020

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISCO

GitHub PoC★ 2

User Enumeration Proof Of Concept Exploit for CVE-2019-8449

CVE-2019-8449—14 fev 2020

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate username

60RISCO

GitHub PoC

exploit for DNS 4.3

CVE-2013-6987—13 fev 2020

Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager (DSM) before

28RISCO

Exploit-DB

PANDORAFMS 7.0 - Authenticated Remote Code Execution

CVE-2020-8947—webappsphp13 fev 2020

functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metac

28RISCO

GitHub PoC★ 2

An Python Exploit for Sudo vulnerability CVE-2019-18634

CVE-2019-18634—13 fev 2020

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the

28RISCO

Exploit-DB✓ VexDay Proof

HP System Event Utility - Local Privilege Escalation

CVE-2019-18915—localwindows12 fev 2020

A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version

23RISCO

GitHub PoC

PoC for CVE-2020-0601 vulnerability (Code Signing)

CVE-2020-0601HIGHsob ataque12 fev 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

VulnCheck XDB

remote-with-credentials

CVE-2019-9193—12 fev 2020

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISCO

GitHub PoC★ 3

PostgreSQL Remote Code Executuon

CVE-2019-9193—12 fev 2020

In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve

60RISCO

GitHub PoC

https://github.com/awakened1712/CVE-2019-11932

CVE-2019-11932—11 fev 2020

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version

35RISCO

VulnCheck XDB

local

CVE-2020-0683HIGHsob ataque11 fev 2020

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

71RISCO

Exploit-DB

CHIYU BF430 TCP IP Converter - Stored Cross-Site Scripting

CVE-2020-8839—webappscgi11 fev 2020

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cg

23RISCO

GitHub PoC

N0b1e6/CVE-2018-1335-Python3

CVE-2018-1335—11 fev 2020

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to

60RISCO

VulnCheck XDB

initial-access

CVE-2018-1335—11 fev 2020

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to

60RISCO

Exploit-DB✓ VexDay Proof

OpenSMTPD 6.4.0 < 6.6.1 - Local Privilege Escalation + Remote Code Execution

CVE-2020-7247CRITICALsob ataqueremoteopenbsd11 fev 2020

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to

100RISCO

GitHub PoC★ 337

CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege

CVE-2020-0683HIGHsob ataque11 fev 2020

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'W

71RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.