Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

79.230 exploits

GitHub PoC

gurneesh/CVE-2019-14287-write-up

CVE-2019-14287—16 out 2019

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

GitHub PoC★ 10

Standalone Python 3 exploit for CVE-2017-17562

CVE-2017-17562HIGHsob ataque16 out 2019

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T

100RISCO

GitHub PoC★ 1

Exploit and Mass Pwn3r for CVE-2019-16920

CVE-2019-16920CRITICALsob ataque16 out 2019

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The i

100RISCO

Metasploit600

Solaris xscreensaver log Privilege Escalation

CVE-2019-3010HIGHsob ataque16 out 2019

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is a

91RISCO

GitHub PoC★ 1

FauxFaux/sudo-cve-2019-14287

CVE-2019-14287—15 out 2019

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

VulnCheck XDB

denial-of-service

CVE-2019-0708CRITICALsob ataqueransomware15 out 2019

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALsob ataqueransomware15 out 2019

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

GitHub PoC★ 13

Sudo exploit

CVE-2019-14287—15 out 2019

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

GitHub PoC★ 9

CVE-2019-16728 Proof of Concept

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

GitHub PoC★ 70

Directory transversal to remote code execution

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

VulnCheck XDB

initial-access

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

VulnCheck XDB

initial-access

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

VulnCheck XDB

initial-access

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

GitHub PoC★ 3

CVE-2019-16278Nostromo httpd命令执行

CVE-2019-16278CRITICALsob ataque15 out 2019

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

Exploit-DB

sudo 1.8.27 - Security Bypass

CVE-2019-14287—locallinux15 out 2019

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

GitHub PoC★ 1

This is a container built for demonstration purposes that has a version of the sudo command which is vulnerable to CVE-2019-14287

CVE-2019-14287—15 out 2019

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se

35RISCO

Exploit-DB

Kirona-DRS 5.5.3.5 - Information Disclosure

CVE-2019-17503—webappsphp14 out 2019

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REG

50RISCO

GitHub PoC

Spring Security OAuth 2.3 Open Redirection 分析复现篇

CVE-2019-3778—14 out 2019

Open Redirect in spring-security-oauth2

28RISCO

GitHub PoC★ 136

Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215

CVE-2019-2215HIGHsob ataque14 out 2019

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

Metasploit600

Ajenti auth username Command Injection

CVE-2019-25066MEDIUM14 out 2019

ajenti API privileges management

28RISCO

Exploit-DB

Kirona-DRS 5.5.3.5 - Information Disclosure

CVE-2019-17504—webappsphp14 out 2019

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vuln

23RISCO

VulnCheck XDB

local

CVE-2019-2215HIGHsob ataque14 out 2019

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

VulnCheck XDB

infoleak

CVE-2018-13379CRITICALsob ataqueransomware14 out 2019

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISCO

Exploit-DB

Apache Httpd mod_proxy - Error Page Cross-Site Scripting

CVE-2019-10092—webappsmultiple14 out 2019

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page

60RISCO

Exploit-DB

WordPress Core < 5.2.3 - Viewing Unauthenticated/Password/Private Posts

CVE-2019-17671—webappsmultiple14 out 2019

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is m

50RISCO

GitHub PoC★ 12

CVE-2018-13379 Script for Nmap NSE.

CVE-2018-13379CRITICALsob ataqueransomware14 out 2019

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISCO

Exploit-DB

Apache Httpd mod_rewrite - Open Redirects

CVE-2019-10098—webappsmultiple14 out 2019

In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential m

60RISCO

VulnCheck XDB

local

CVE-2019-2215HIGHsob ataque12 out 2019

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti

100RISCO

VulnCheck XDB

initial-access

CVE-2019-16759CRITICALsob ataque12 out 2019

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge

100RISCO

GitHub PoC

h-wookie/cve-2019-5736-poc

CVE-2019-5736—12 out 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.