Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

22.786 exploits

Exploit-DB

WordPress Plugin Contact Form 7 to Database Extension 2.10.32 - CSV Injection

CVE-2018-9035—30 mar 2018

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPr

23RISCO

abrir ↗

Exploit-DB

Joomla! Component AcySMS 3.5.0 - CSV Macro Injection

CVE-2018-9106—30 mar 2018

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the export feature in the Acyba AcySMS extensio

23RISCO

abrir ↗

Exploit-DB

Homematic CCU2 2.29.23 - Arbitrary File Write

CVE-2018-7300—30 mar 2018

Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic C

35RISCO

abrir ↗

Exploit-DB

Systematic SitAware - NVG Denial of Service

CVE-2018-9115—30 mar 2018

Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NVG

23RISCO

abrir ↗

Exploit-DB

Cisco Smart Install - Crash (PoC)

CVE-2018-0171HIGHsob ataque29 mar 2018

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica

100RISCO

abrir ↗

Exploit-DB

Joomla! Component Fields - SQLi Remote Code Execution (Metasploit)

CVE-2017-8917—29 mar 2018

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci

60RISCO

abrir ↗

Exploit-DB

GitStack - Unsanitized Argument Remote Code Execution (Metasploit)

CVE-2018-5955—29 mar 2018

An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unau

60RISCO

abrir ↗

Exploit-DB

Exodus Wallet (ElectronJS Framework) - Remote Code Execution (Metasploit)

CVE-2018-1000006—29 mar 2018

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the pro

60RISCO

abrir ↗

Exploit-DB

Open-AuditIT Professional 2.1 - Cross-Site Scripting

CVE-2018-8903—28 mar 2018

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.

23RISCO

abrir ↗

Exploit-DB

TwonkyMedia Server 7.0.11-8.5 - Persistent Cross-Site Scripting

CVE-2018-7203—28 mar 2018

Cross-site scripting (XSS) vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to inject arbitrary

23RISCO

abrir ↗

Exploit-DB

Microsoft Windows Remote Assistance - XML External Entity Injection

CVE-2018-0878LOW28 mar 2018

Windows Remote Assistance in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Window

33RISCO

abrir ↗

Exploit-DB

TwonkyMedia Server 7.0.11-8.5 - Directory Traversal

CVE-2018-7171—28 mar 2018

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of a

28RISCO

abrir ↗

Exploit-DB

DLINK DCS-5020L - Remote Code Execution (PoC)

CVE-2017-17020—27 mar 2018

On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and DC

28RISCO

abrir ↗

Exploit-DB

Laravel Log Viewer < 0.13.0 - Local File Download

CVE-2018-8947—26 mar 2018

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easi

28RISCO

abrir ↗

Exploit-DB

Acrolinx Server < 5.2.5 - Directory Traversal

CVE-2018-7719—26 mar 2018

Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.

50RISCO

abrir ↗

Exploit-DB

Microsoft Windows Manager (7 x86) - Menu Management Component UAF Privilege Elevation

CVE-2017-0263HIGHsob ataque26 mar 2018

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

76RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure

CVE-2017-13262—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

CVE-2017-13262—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. Th

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

CVE-2017-13261—23 mar 2018

In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. T

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

CVE-2017-13258—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure

CVE-2017-13260—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

CVE-2017-13260—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

23RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure

CVE-2017-13258—23 mar 2018

In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead

23RISCO

abrir ↗

Exploit-DB

Dell EMC NetWorker - Denial of Service

CVE-2018-1218—23 mar 2018

In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the '

28RISCO

abrir ↗

Exploit-DB

Android Bluetooth - BNEP bnep_data_ind() Remote Heap Disclosure

CVE-2017-13261—23 mar 2018

In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. T

23RISCO

abrir ↗

Exploit-DB

WordPress Plugin Site Editor 1.1.1 - Local File Inclusion

CVE-2018-7422—23 mar 2018

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

50RISCO

abrir ↗

Exploit-DB

Linux Kernel < 4.15.4 - 'show_floppy' KASLR Address Leak

CVE-2018-7273—22 mar 2018

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables usi

23RISCO

abrir ↗

Exploit-DB

Vehicle Sales Management System - Multiple Vulnerabilities

CVE-2017-1000474—20 mar 2018

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/veh

23RISCO

abrir ↗

Exploit-DB

Intelbras Telefone IP TIP200 LITE - Local File Disclosure

CVE-2018-9010—20 mar 2018

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via t

23RISCO

abrir ↗

Exploit-DB

Coship RT3052 Wireless Router - Persistent Cross-Site Scripting

CVE-2018-8772—20 mar 2018

Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.