Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.388exploits catalogados
40.212CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9.990Nuclei 4.547Metasploit 3.531✓ só verificadosrecentespopularesrisco
86.388 exploits
GitHub PoC★ 10
Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗GitHub PoC
likekabin/CVE-2018-10933_ssh
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Metasploit300
LibreOffice Macro Code Execution
It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could
68RISCO
abrir ↗GitHub PoC★ 1
Scripts to analyze conflicker worm which exploits famous netapi vulnerability (CVE-2008-4250) i.e MS08-067
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISCO
abrir ↗VulnCheck XDB
initial-access
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir ↗GitHub PoC★ 498
Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Exploit-DB
BigTree CMS 4.2.23 - Cross-Site Scripting
In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (ak
23RISCO
abrir ↗GitHub PoC★ 126
CVE-2018-10933 very simple POC
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Exploit-DB
TP-Link TL-SC3130 1.6.18 - RTSP Stream Disclosure
TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg
28RISCO
abrir ↗VulnCheck XDB
client-side
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISCO
abrir ↗GitHub PoC★ 235
Script to identify hosts vulnerable to CVE-2018-10933
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗GitHub PoC★ 14
Leveraging it is a simple matter of presenting the server with the SSH2_MSG_USERAUTH_SUCCESS message, which shows that the login already occurred without a problem. The server expects the message SSH2_MSG_USERAUTH_REQUEST to start the authentication procedure, but by skipping it an attacker can log in without showing any credentials.
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗GitHub PoC
CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗GitHub PoC★ 9
Proof of Concept Exploit for PrimeFaces 5.x EL Injection (CVE-2017-1000486)
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
100RISCO
abrir ↗GitHub PoC★ 2
Metasploit module for CVE-2018-4878
A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to
93RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio
38RISCO
abrir ↗Exploit-DB
Git Submodule - Arbitrary Code Execution
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x be
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t
38RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Solaris - RSH Stack Clash Privilege Escalation (Metasploit)
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie
38RISCO
abrir ↗Metasploit300
libssh Authentication Bypass Scanner
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RISCO
abrir ↗Exploit-DB✓ VexDay Proof
VLC Media Player - MKV Use-After-Free (Metasploit)
VideoLAN VLC media player 2.2.x is prone to a use after free vulnerability which an attacker can leverage to execute arb
50RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Windows - 'FSCTL_FIND_FILES_BY_SID' Information Disclosure
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln
23RISCO
abrir ↗Exploit-DB
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin/
60RISCO
abrir ↗GitHub PoC★ 62
PoC + Docker Environment for Python PIL/Pillow Remote Shell Command Execution via Ghostscript CVE-2018-16509
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin
60RISCO
abrir ↗Exploit-DB
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/ind
28RISCO
abrir ↗VulnCheck XDB
remote-with-credentials
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin
60RISCO
abrir ↗Exploit-DB
Centos Web Panel 0.9.8.480 - Multiple Vulnerabilities
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir parameter
23RISCO
abrir ↗Exploit-DB
NoMachine < 5.3.27 - Remote Code Execution
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file lo
23RISCO
abrir ↗GitHub PoC★ 15
Automated version of CVE-2018-14847 (MikroTik Exploit)
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.