Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

24.443 exploits

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-62771—webappscgi06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Apache mod_cgi - 'Shellshock' Remote Command Injection

CVE-2014-6278HIGHsob ataqueremotelinux06 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

100RISCO

Exploit-DB✓ VexDay Proof

Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection

CVE-2014-62771—remotelinux06 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)

CVE-2014-3659—webappscgi06 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-62771—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3659—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7169CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7196—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-3671—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7227—remotelinux04 out 2014

20RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-7910—remotelinux04 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB

OpenVPN 2.2.29 - 'Shellshock' Remote Command Injection

CVE-2014-6271CRITICALsob ataqueremotelinux04 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

TeamSpeak Client 3.0.14 - Buffer Overflow

CVE-2014-7222—doswindows02 out 2014

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (a

28RISCO

Exploit-DB✓ VexDay Proof

TestLink 1.9.11 - Multiple SQL Injections

CVE-2014-5308—webappsphp02 out 2014

Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL comm

23RISCO

Exploit-DB✓ VexDay Proof

Bacula-Web 5.2.10 - 'joblogs.php?jobid' SQL Injection

CVE-2014-8295—webappsphp02 out 2014

SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL command

23RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-6277—remotelinux02 out 2014

GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, whi

35RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-6271CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7187—remotelinux02 out 2014

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers t

35RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-3659—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-3671—remotelinux02 out 2014

20RISCO

Exploit-DB✓ VexDay Proof

Kolibri WebServer 2.0 - Remote Buffer Overflow (EMET 5.0 / EMET 4.1 Partial Bypass)

CVE-2014-5289—remotewindows02 out 2014

Buffer overflow in Senkas Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a POST request

28RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7910—remotelinux02 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-3671—remotelinux02 out 2014

20RISCO

Exploit-DB

Epicor Enterprise 7.4 - Multiple Vulnerabilities

CVE-2014-4312—webappsasp02 out 2014

Multiple cross-site scripting (XSS) vulnerabilities in Epicor Enterprise 7.4 before FS74SP6_HotfixTL054181 allow remote

23RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7227—remotelinux02 out 2014

20RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-6271CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RISCO

Exploit-DB✓ VexDay Proof

Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)

CVE-2014-7169CRITICALsob ataqueremotelinux02 out 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RISCO

Exploit-DB✓ VexDay Proof

PHPCompta/NOALYSS 6.7.1 5638 - Remote Command Execution

CVE-2014-6389—webappsphp02 out 2014

backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharact

23RISCO

Exploit-DB

GNU bash 4.3.11 - Environment Variable dhclient

CVE-2014-7910—remotelinux02 out 2014

Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service o

23RISCO

Exploit-DB✓ VexDay Proof

TeamSpeak Client 3.0.14 - Buffer Overflow

CVE-2014-7221—doswindows02 out 2014

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and

28RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.