Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.305exploits catalogados

36.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentes populares risco

79.305 exploits

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Heap-Based Buffer Overflow in OpenType Font Handling in readStrings

CVE-2019-1122—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Incorrect Handling of blendArray

CVE-2019-1119—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative cubeStackDepth

CVE-2019-1118—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling While Processing CFF Blend DICT Operator

CVE-2019-1123—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Heap-Based Out-of-Bounds Read/Write in OpenType Font Handling Due to Empty ROS Strings

CVE-2019-1124—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB✓ VexDay Proof

Microsoft DirectWrite / AFDKO - Stack Corruption in OpenType Font Handling Due to Negative nAxes

CVE-2019-1127—doswindows10 jul 2019

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Rem

28RISCO

Exploit-DB

FreeBSD 12.0 - 'fd' Local Privilege Escalation

CVE-2019-5596—localfreebsd10 jul 2019

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEAS

23RISCO

Metasploit600

D-Link Central WiFi Manager CWM(100) RCE

CVE-2019-13372—09 jul 2019

/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote atta

40RISCO

GitHub PoC★ 14

thepwnrip/leHACK-Analysis-of-CVE-2018-8453

CVE-2018-8453HIGHsob ataqueransomware08 jul 2019

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISCO

Exploit-DB

WordPress Plugin Like Button 1.6.0 - Authentication Bypass

CVE-2019-13344—webappsphp08 jul 2019

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthent

35RISCO

Exploit-DB

Apache mod_ssl < 2.8.7 OpenSSL - 'OpenFuckV2.c' Remote Buffer Overflow (2)

CVE-2002-0082—remoteunix07 jul 2019

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly

28RISCO

Metasploit300

D-Link Central WiFiManager SQL injection

CVE-2019-13373—06 jul 2019

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validate

30RISCO

GitHub PoC★ 4

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.

CVE-2012-1823CRITICALsob ataque05 jul 2019

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not

100RISCO

Metasploit0

Docker-Credential-Wincred.exe Privilege Escalation

CVE-2019-15752HIGHsob ataque05 jul 2019

Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c

98RISCO

GitHub PoC★ 4

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.

CVE-2007-2447—05 jul 2019

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands

50RISCO

VulnCheck XDB

client-side

CVE-2018-9995—05 jul 2019

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

Exploit-DB

Microsoft Exchange 2003 - base64-MIME Remote Code Execution

CVE-2007-0213—remotewindows05 jul 2019

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, wh

35RISCO

GitHub PoC★ 12

ze0r/CVE-2019-0708-exp

CVE-2019-0708CRITICALsob ataqueransomware04 jul 2019

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

Metasploit600

Linux Polkit pkexec helper PTRACE_TRACEME local root exploit

CVE-2019-13272HIGHsob ataque04 jul 2019

In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce

98RISCO

Exploit-DB

Symantec DLP 15.5 MP1 - Cross-Site Scripting

CVE-2019-9701—webappsmultiple03 jul 2019

DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue th

23RISCO

Exploit-DB✓ VexDay Proof

Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (Metasploit)

CVE-2019-0232—remotewindows03 jul 2019

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0

60RISCO

Exploit-DB✓ VexDay Proof

Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)

CVE-2019-12181—locallinux03 jul 2019

A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

50RISCO

Exploit-DB

Centreon 19.04 - Remote Code Execution

CVE-2019-13024—webappsphp02 jul 2019

Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centreon web before 2.8.29 allows the attacker to execute arbitra

35RISCO

Exploit-DB✓ VexDay Proof

Mac OS X TimeMachine - 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)

CVE-2019-8513—localmacos02 jul 2019

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.4. A local user may be able to

38RISCO

Exploit-DB

SAP Crystal Reports - Information Disclosure

CVE-2019-0285—webappsmultiple01 jul 2019

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive databas

23RISCO

GitHub PoC

https://github.com/Yt1g3r/CVE-2019-3396_EXP.git

CVE-2019-3396CRITICALsob ataqueransomware01 jul 2019

The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers

100RISCO

GitHub PoC★ 3

TrungNguyen1909/CVE-2019-6225-macOS

CVE-2019-6225—30 jun 2019

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.

28RISCO

GitHub PoC

Proof of concept code for breaking out of docker via runC

CVE-2019-5736—30 jun 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

Exploit-DB✓ VexDay Proof

LibreNMS 1.46 - 'addhost' Remote Code Execution

CVE-2018-20434—webappsphp28 jun 2019

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to htm

60RISCO

GitHub PoC★ 9

CVE-2019-10149 privilege escalation

CVE-2019-10149CRITICALsob ataque27 jun 2019

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.