Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.186exploits catalogados

40.156CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9.976Nuclei 4.542Metasploit 3.530✓ só verificadosrecentes populares risco

86.186 exploits

GitHub PoC★ 1

cve-2018-11776

CVE-2018-11776HIGHsob ataque06 jan 2019

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

abrir ↗

GitHub PoC

cve-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware06 jan 2019

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC

cve-2017-7494

CVE-2017-7494CRITICALsob ataqueransomware06 jan 2019

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISCO

abrir ↗

GitHub PoC

cve-2014-0160

CVE-2014-0160HIGHsob ataque06 jan 2019

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

abrir ↗

GitHub PoC

cve-2015-8103

CVE-2015-8103—06 jan 2019

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

GitHub PoC

cve-2015-3306

CVE-2015-3306CRITICALsob ataque06 jan 2019

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

100RISCO

abrir ↗

GitHub PoC

cve-2015-5602

CVE-2015-5602—06 jan 2019

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d

23RISCO

abrir ↗

GitHub PoC

Villaquiranm/5MMISSI-CVE-2017-1000499

CVE-2017-1000499—05 jan 2019

phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a

23RISCO

abrir ↗

GitHub PoC★ 1

CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit

CVE-2016-4971—05 jan 2019

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted F

35RISCO

abrir ↗

GitHub PoC

CVE-2009-1330 - Easy RM to MP3 Converter Local Buffer Overflow. Tested on Windows XP Professional SP3

CVE-2009-1330—05 jan 2019

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Exploit-DB

Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (dbus Method)

CVE-2018-18955—locallinux04 jan 2019

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISCO

abrir ↗

Exploit-DB

Linux Kernel 4.15.x < 4.19.2 - 'map_write() CAP_SYS_ADMIN' Local Privilege Escalation (polkit Method)

CVE-2018-18955—locallinux04 jan 2019

In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalat

38RISCO

abrir ↗

GitHub PoC★ 2

## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

CVE-2017-8570HIGHsob ataque03 jan 2019

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic

93RISCO

abrir ↗

Exploit-DB

Frog CMS 0.9.5 - Cross-Site Scripting

CVE-2018-20448—webappsphp02 jan 2019

Frog CMS 0.9.5 has XSS via the Database name field to the /install/index.php URI.

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebKit JSC - 'JSArray::shiftCountWithArrayStorage' Out-of-Bounds Read/Write

CVE-2018-4441—dosmultiple02 jan 2019

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1,

28RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

WebKit JSC - 'AbstractValue::set' Use-After-Free

CVE-2018-4443—dosmultiple02 jan 2019

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1,

23RISCO

abrir ↗

GitHub PoC

Bash implementation of CVE-2014-5284

CVE-2014-5284—02 jan 2019

host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, whi

23RISCO

abrir ↗

Exploit-DB

Ayukov NFTP FTP Client 2.0 - Buffer Overflow

CVE-2017-15222—localwindows_x8602 jan 2019

Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.

50RISCO

abrir ↗

Metasploit0

Docker Container Escape Via runC Overwrite

CVE-2019-5736—01 jan 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

GitHub PoC

some works on CVE-2018-19518

CVE-2018-19518—31 dez 2018

University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh c

60RISCO

abrir ↗

GitHub PoC★ 1

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

CVE-2008-0166—31 dez 2018

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge

45RISCO

abrir ↗

Exploit-DB

VMware Workstation/Player < 12.5.5 - Local Privilege Escalation

CVE-2017-4915—localmultiple30 dez 2018

VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil

38RISCO

abrir ↗

GitHub PoC

Simple exploit for Easy RM to MP3 Converter 2.7.3.700 on Windows 7 32b.

CVE-2009-1330—30 dez 2018

Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long fil

28RISCO

abrir ↗

Exploit-DB

Linux Kernel 4.4.0-21 < 4.4.0-51 (Ubuntu 14.04/16.04 x64) - 'AF_PACKET' Race Condition Privilege Escalation

CVE-2016-8655—localwindows_x86-6429 dez 2018

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

43RISCO

abrir ↗

Exploit-DB

Linux Kernel 4.8.0-34 < 4.8.0-45 (Ubuntu / Linux Mint) - Packet Socket Local Privilege Escalation

CVE-2017-7308—locallinux29 dez 2018

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

43RISCO

abrir ↗

Exploit-DB

Linux Kernel < 4.4.0/ < 4.8.0 (Ubuntu 14.04/16.04 / Linux Mint 17/18 / Zorin) - Local Privilege Escalation (KASLR / SMEP)

CVE-2017-1000112—locallinux29 dez 2018

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2018-8581HIGHsob ataqueransomware28 dez 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RISCO

abrir ↗

GitHub PoC★ 5

CVE-2018-8581

CVE-2018-8581HIGHsob ataqueransomware28 dez 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RISCO

abrir ↗

GitHub PoC★ 331

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2018-8581HIGHsob ataqueransomware27 dez 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-8581HIGHsob ataqueransomware27 dez 2018

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of

76RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.