Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

19.066 exploits

Exploit-DB✓ VexDay Proof

phpMyAdmin - (Authenticated) Remote Code Execution (Metasploit)

CVE-2018-12613—remotephp13 jul 2018

An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute

60RISCO

Exploit-DB✓ VexDay Proof

Apache CouchDB - Arbitrary Command Execution (Metasploit)

CVE-2017-12636—remotelinux13 jul 2018

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include pa

60RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit)

CVE-2018-8897—localwindows13 jul 2018

A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) wa

43RISCO

Exploit-DB✓ VexDay Proof

Apache CouchDB - Arbitrary Command Execution (Metasploit)

CVE-2017-12635—remotelinux13 jul 2018

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be

60RISCO

Exploit-DB✓ VexDay Proof

WAGO e!DISPLAY 7300T - Multiple Vulnerabilities

CVE-2018-12980—webappsphp13 jul 2018

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit

35RISCO

Exploit-DB✓ VexDay Proof

WAGO e!DISPLAY 7300T - Multiple Vulnerabilities

CVE-2018-12981—webappsphp13 jul 2018

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerabilit

23RISCO

Exploit-DB✓ VexDay Proof

WAGO e!DISPLAY 7300T - Multiple Vulnerabilities

CVE-2018-12979—webappsphp13 jul 2018

An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions

23RISCO

Exploit-DB✓ VexDay Proof

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

CVE-2018-0710—webappshardware13 jul 2018

Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authe

28RISCO

Exploit-DB✓ VexDay Proof

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

CVE-2018-0706—webappshardware13 jul 2018

Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticate

50RISCO

Exploit-DB✓ VexDay Proof

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

CVE-2018-0707—webappshardware13 jul 2018

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could

50RISCO

Exploit-DB✓ VexDay Proof

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

CVE-2018-0708—webappshardware13 jul 2018

Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allo

28RISCO

Exploit-DB✓ VexDay Proof

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

CVE-2018-0709—webappshardware13 jul 2018

Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft Edge Chakra JIT - BoundFunction::NewInstance Out-of-Bounds Read

CVE-2018-8139—doswindows12 jul 2018

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Edge Chakra JIT - Out-of-Bounds Reads/Writes

CVE-2018-8145—doswindows12 jul 2018

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could

35RISCO

Exploit-DB✓ VexDay Proof

Microsoft Edge Chakra JIT - Type Confusion with Hoisted SetConcatStrMultiItemBE Instructions

CVE-2018-8229—doswindows12 jul 2018

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

45RISCO

Exploit-DB✓ VexDay Proof

IBM QRadar SIEM - Remote Code Execution (Metasploit)

CVE-2016-9722—remoteunix11 jul 2018

IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be r

43RISCO

Exploit-DB✓ VexDay Proof

IBM QRadar SIEM - Remote Code Execution (Metasploit)

CVE-2018-1612MEDIUMremoteunix11 jul 2018

IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and

60RISCO

Exploit-DB✓ VexDay Proof

IBM QRadar SIEM - Remote Code Execution (Metasploit)

CVE-2018-1418—remoteunix11 jul 2018

IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM

50RISCO

Exploit-DB✓ VexDay Proof

Linux Kernel < 4.13.9 (Ubuntu 16.04 / Fedora 27) - Local Privilege Escalation

CVE-2017-16995—locallinux10 jul 2018

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

50RISCO

Exploit-DB✓ VexDay Proof

CMS Made Simple 2.2.5 - (Authenticated) Remote Code Execution

CVE-2018-1000094—webappsphp04 jul 2018

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows a

50RISCO

Exploit-DB✓ VexDay Proof

Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (Metasploit)

CVE-2015-7243—localwindows03 jul 2018

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly

50RISCO

Exploit-DB✓ VexDay Proof

Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit)

CVE-2018-8734—remotelinux02 jul 2018

SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker

50RISCO

Exploit-DB✓ VexDay Proof

Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit)

CVE-2018-8735—remotelinux02 jul 2018

Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execut

50RISCO

Exploit-DB✓ VexDay Proof

Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit)

CVE-2018-8736—remotelinux02 jul 2018

A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RC

50RISCO

Exploit-DB✓ VexDay Proof

Nagios XI 5.2.6-5.4.12 - Chained Remote Code Execution (Metasploit)

CVE-2018-8733—remotelinux02 jul 2018

Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an

43RISCO

Exploit-DB✓ VexDay Proof

VMware NSX SD-WAN Edge < 3.1.2 - Command Injection

CVE-2018-6961HIGHsob ataquewebappshardware02 jul 2018

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U

100RISCO

Exploit-DB✓ VexDay Proof

FTPShell Client 6.70 (Enterprise Edition) - Stack Buffer Overflow (Metasploit)

CVE-2018-7573—remotewindows02 jul 2018

An issue was discovered in FTPShell Client 6.7. A remote FTP server can send 400 characters of 'F' in conjunction with t

50RISCO

Exploit-DB✓ VexDay Proof

HongCMS 3.0.0 - (Authenticated) SQL Injection

CVE-2018-12912—webappsphp28 jun 2018

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via a

23RISCO

Exploit-DB✓ VexDay Proof

Quest KACE Systems Management - Command Injection (Metasploit)

CVE-2018-11138CRITICALsob ataqueransomwareremoteunix27 jun 2018

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by

100RISCO

Exploit-DB✓ VexDay Proof

Foxit Reader 9.0.1.1049 - Remote Code Execution

CVE-2018-9948—remotewindows25 jun 2018

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader

50RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.