Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

79.386 exploits

Exploit-DB

OpenSSH < 7.7 - User Enumeration (2)

CVE-2018-15473MEDIUMremotelinux04 dez 2018

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati

70RISCO

abrir ↗

Exploit-DB

Xorg X11 Server (AIX) - Local Privilege Escalation

CVE-2018-14665—localaix04 dez 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

abrir ↗

Exploit-DB

NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage

CVE-2018-11741—webappshardware04 dez 2018

NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure vi

28RISCO

abrir ↗

Exploit-DB

NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage

CVE-2018-11742—webappshardware04 dez 2018

NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

28RISCO

abrir ↗

Exploit-DB

DomainMOD 4.11.01 - Owner name Field Cross-Site Scripting

CVE-2018-19749—webappsphp04 dez 2018

DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.

38RISCO

abrir ↗

Exploit-DB

DomainMOD 4.11.01 - Custom SSL Fields Cross-Site Scripting

CVE-2018-19751—webappsphp04 dez 2018

DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.

38RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Wireshark - 'find_signature' Heap Out-of-Bounds Read

CVE-2018-19627—dosmultiple04 dez 2018

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/v

28RISCO

abrir ↗

Exploit-DB

NUUO NVRMini2 3.9.1 - (Authenticated) Command Injection

CVE-2018-15716—webappsphp04 dez 2018

NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reques

28RISCO

abrir ↗

Exploit-DB

FreshRSS 1.11.1 - Cross-Site Scripting

CVE-2018-19782—webappsphp04 dez 2018

Multiple cross-site scripting (XSS) vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject

23RISCO

abrir ↗

Exploit-DB

Dolibarr ERP/CRM 8.0.3 - Cross-Site Scripting

CVE-2018-19799—webappsphp04 dez 2018

Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

23RISCO

abrir ↗

Exploit-DB

DomainMOD 4.11.01 - Registrar Cross-Site Scripting

CVE-2018-19752—webappsphp04 dez 2018

DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

38RISCO

abrir ↗

Exploit-DB

DomainMOD 4.11.01 - Custom Domain Fields Cross-Site Scripting

CVE-2018-19750—webappsphp04 dez 2018

DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Doma

23RISCO

abrir ↗

Exploit-DB

CyberArk 9.7 - Memory Disclosure

CVE-2018-9842—remotewindows03 dez 2018

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISCO

abrir ↗

Exploit-DB

Apache Superset < 0.23 - Remote Code Execution

CVE-2018-8021—webappslinux03 dez 2018

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to pos

35RISCO

abrir ↗

GitHub PoC

CVE-2014-4511

CVE-2014-4511—03 dez 2018

Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in

60RISCO

abrir ↗

GitHub PoC★ 1

A collection of code pertaining to CVE-2016-0728 (various authors)

CVE-2016-0728—03 dez 2018

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2016-0728—03 dez 2018

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

23RISCO

abrir ↗

GitHub PoC

This is an exploitation guide for CVE-2016-2233

CVE-2016-2233—03 dez 2018

Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC serve

35RISCO

abrir ↗

GitHub PoC

A VENOM (CVE-2015-3456) Exploit / PoC written in C.

CVE-2015-3456—03 dez 2018

The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a

28RISCO

abrir ↗

GitHub PoC

CVE-2016-1240 exploit and patch

CVE-2016-1240—02 dez 2018

The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debia

38RISCO

abrir ↗

GitHub PoC★ 104

CVE-2018-8021 Proof-Of-Concept and Exploit

CVE-2018-8021—02 dez 2018

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to pos

35RISCO

abrir ↗

GitHub PoC★ 39

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

CVE-2018-19126—01 dez 2018

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u

28RISCO

abrir ↗

Exploit-DB

PhpSpreadsheet < 1.5.0 - XML External Entity (XXE)

CVE-2018-19277—webappsphp30 nov 2018

securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 enco

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

VBScript - 'OLEAUT32!VariantClear' and 'scrrun!VBADictionary::put_Item' Use-After-Free

CVE-2018-8544—doswindows30 nov 2018

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

35RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

VBScript - 'rtFilter' Out-of-Bounds Read

CVE-2018-8552—doswindows30 nov 2018

An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which coul

35RISCO

abrir ↗

Exploit-DB

Schneider Electric PLC - Session Calculation Authentication Bypass

CVE-2017-6026—webappshardware30 nov 2018

A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ver

35RISCO

abrir ↗

GitHub PoC★ 50

All about CVE-2018-14667; From what it is to how to successfully exploit it.

CVE-2018-14667CRITICALsob ataque30 nov 2018

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2018-14667CRITICALsob ataque30 nov 2018

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou

100RISCO

abrir ↗

Exploit-DB

xorg-x11-server < 1.20.3 - 'modulepath' Local Privilege Escalation

CVE-2018-14665—localmultiple30 nov 2018

A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh

43RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Unitrends Enterprise Backup - bpserverd Privilege Escalation (Metasploit)

CVE-2018-6329—locallinux29 nov 2018

It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL i

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.