Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
22.786 exploits
Exploit-DB
Joomla! Component JS Jobs 1.1.9 - SQL Injection
CVE-2018-599416 fev 2018
SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or t
23RISCO
abrir
Exploit-DB
Joomla! Component Google Map Landkarten 4.2.3 - SQL Injection
CVE-2018-639616 fev 2018
SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a l
28RISCO
abrir
Exploit-DB
Joomla! Component Aist 2.0 - 'id' SQL Injection
CVE-2018-599316 fev 2018
SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.
23RISCO
abrir
Exploit-DB
Joomla! Component Staff Master 1.0 RC 1 - SQL Injection
CVE-2018-599216 fev 2018
SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff r
23RISCO
abrir
Exploit-DB
Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting
CVE-2017-1004616 fev 2018
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (
23RISCO
abrir
Exploit-DB
Joomla! Component Form Maker 3.6.12 - SQL Injection
CVE-2018-599116 fev 2018
SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats re
23RISCO
abrir
Exploit-DB
Joomla! Component AllVideos Reloaded 1.2.x - 'divid' SQL Injection
CVE-2018-599016 fev 2018
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
23RISCO
abrir
Exploit-DB
Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection
CVE-2018-598716 fev 2018
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id paramete
23RISCO
abrir
Exploit-DB
Joomla! Component Smart Shoutbox 3.0.0 - SQL Injection
CVE-2018-597516 fev 2018
SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI.
23RISCO
abrir
Exploit-DB
Joomla! Component MediaLibrary Free 4.0.12 - SQL Injection
CVE-2018-597116 fev 2018
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array paramet
23RISCO
abrir
Exploit-DB
Joomla! Component Project Log 1.5.3 - 'search' SQL Injection
CVE-2018-602416 fev 2018
SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.
23RISCO
abrir
Exploit-DB
Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module < 4.25 - Denial of Service
CVE-2015-537416 fev 2018
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;
60RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - 'LdThis' Type Confusion
CVE-2018-083715 fev 2018
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - 'Array.prototype.reverse' Array Type Confusion
CVE-2018-083515 fev 2018
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - Memory Corruption
CVE-2018-086015 fev 2018
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - 'GlobOpt::OptTagChecks' Must Consider IsLoopPrePass Properly (2)
CVE-2018-077015 fev 2018
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitra
45RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - 'NewScObjectNoCtor' Array Type Confusion
CVE-2018-083815 fev 2018
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - Array Type Confusion via InitProto Instructions
CVE-2018-083415 fev 2018
Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot
35RISCO
abrir
Exploit-DB
Microsoft Edge Chakra JIT - ImplicitCallFlags Checks Bypass
CVE-2018-084015 fev 2018
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server
35RISCO
abrir
Exploit-DB
NAT32 2.2 Build 22284 - Cross-Site Request Forgery
CVE-2018-694114 fev 2018
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-118614 fev 2018
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-120314 fev 2018
In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0
23RISCO
abrir
Exploit-DB
Tenda AC15 Router - Remote Code Execution
CVE-2018-576714 fev 2018
An issue was discovered on Tenda AC15 V15.03.1.16_multi devices. A remote, unauthenticated attacker can gain remote code
35RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-118714 fev 2018
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-120114 fev 2018
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-118814 fev 2018
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is af
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-120414 fev 2018
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-118914 fev 2018
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and vers
28RISCO
abrir
Exploit-DB
Dell EMC Isilon OneFS - Multiple Vulnerabilities
CVE-2018-121314 fev 2018
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, an
23RISCO
abrir
Exploit-DB
GNU binutils 2.26.1 - Integer Overflow (PoC)
CVE-2018-632314 fev 2018
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B
23RISCO
abrir
anteriorpágina 104 / 760próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.