Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.186exploits catalogados
40.156CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9.976Nuclei 4.542Metasploit 3.530✓ só verificadosrecentespopularesrisco
86.186 exploits
Exploit-DB
1Password < 7.0 - Denial of Service
The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - SSPI Network Authentication Session 0 Privilege Escalation
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft W
71RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - DSSVC MoveFileInheritSecurity Privilege Escalation
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISCO
abrir ↗Exploit-DB
xorg-x11-server < 1.20.3 (Solaris 11) - 'inittab Local Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Delete Privilege Escalation
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - Browser Broker Cross Session Privilege Escalation
An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevatio
28RISCO
abrir ↗Exploit-DB
Portier Vision 4.4.4.2 / 4.4.4.6 - SQL Injection
An issue was discovered in portier vision 4.4.4.2 and 4.4.4.6. Due to a lack of user input validation in parameter handl
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - DSSVC DSOpenSharedFile Arbitrary File Open Privilege Escalation
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISCO
abrir ↗Exploit-DB
AudioCode 400HD - Command Injection
AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote Code Execution.
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations,
28RISCO
abrir ↗VulnCheck XDB
initial-access
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows 10 - COM Desktop Broker Privilege Escalation
An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability."
23RISCO
abrir ↗GitHub PoC★ 2
Proof of Concept - RCE Exploitation : Web Shell on Apache Tomcat - Ensimag January 2018
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT
100RISCO
abrir ↗Exploit-DB
Hucart CMS 5.7.4 - Cross-Site Request Forgery (Add Administrator Account)
An issue was discovered in HuCart v5.7.4. There is a CSRF vulnerability that can add an admin account via /adminsys/inde
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Dokany 1.2.0.1000 - Stack-Based Buffer Overflow Privilege Escalation
Dokan file system driver contains a stack-based buffer overflow
23RISCO
abrir ↗Exploit-DB
Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (2)
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
50RISCO
abrir ↗Exploit-DB
S-nail < 14.8.16 - Local Privilege Escalation
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local
23RISCO
abrir ↗GitHub PoC
cve-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir ↗Exploit-DB
OpenSSH SCP Client - Write Arbitrary Files
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses wh
45RISCO
abrir ↗GitHub PoC
cve-2016-8870
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before
60RISCO
abrir ↗GitHub PoC
cve-2018-16509
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin
60RISCO
abrir ↗GitHub PoC
cve-2018-9206
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
60RISCO
abrir ↗Exploit-DB
OpenSSH SCP Client - Write Arbitrary Files
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-T
38RISCO
abrir ↗GitHub PoC
cve-2017-8917
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗GitHub PoC
cve-2017-1000486
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir ↗GitHub PoC★ 1
cve-2018-15473
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISCO
abrir ↗GitHub PoC
cve-2016-8869
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before
60RISCO
abrir ↗GitHub PoC★ 1
exploit camera with vuln cve-2018-9995 ( Novo, CeNova, QSee, Pulnix, XVR 5 in 1 (title: "XVR Login"), Securus, - Security. Never Compromise !! - Night OWL, DVR Login, HVR Login, MDVR Login )
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L
60RISCO
abrir ↗Exploit-DB
PEAR Archive_Tar < 1.4.4 - PHP Object Injection
PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are
28RISCO
abrir ↗Exploit-DB
OpenSource ERP 6.3.1. - SQL Injection
Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.