Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
86.390exploits catalogados
40.212CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.070Exploit-DB 24.488GitHub PoC 17.762VulnCheck XDB 9.992Nuclei 4.547Metasploit 3.531✓ só verificadosrecentespopularesrisco
86.390 exploits
Exploit-DB
Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentica
23RISCO
abrir ↗GitHub PoC★ 517
Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir ↗Exploit-DB
Apache Portals Pluto 3.0.0 - Remote Code Execution
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote a
35RISCO
abrir ↗GitHub PoC★ 1
porting CVE-2016-7255 to x86 for educational purposes.
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RISCO
abrir ↗VulnCheck XDB
local
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
93RISCO
abrir ↗GitHub PoC★ 517
Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte
100RISCO
abrir ↗Exploit-DB
Apache Syncope 2.0.7 - Remote Code Execution
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and un
28RISCO
abrir ↗Exploit-DB
Apache Syncope 2.0.7 - Remote Code Execution
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupporte
28RISCO
abrir ↗Exploit-DB
Apple macOS 10.13.4 - Denial of Service (PoC)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 - SQL Injection
IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker co
46RISCO
abrir ↗Exploit-DB
LG Smart IP Camera 1508190 - Backup File Download
LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /u
23RISCO
abrir ↗Exploit-DB
MyBB 1.8.17 - Cross-Site Scripting
An issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can gener
23RISCO
abrir ↗Exploit-DB
SynaMan 4.0 build 1488 - SMTP Credential Disclosure
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
23RISCO
abrir ↗Exploit-DB
CirCarLife SCADA 4.3.0 - Credential Disclosure
CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/lo
50RISCO
abrir ↗Exploit-DB
Rubedo CMS 3.4.0 - Directory Traversal
Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attac
50RISCO
abrir ↗VulnCheck XDB
initial-access
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U
100RISCO
abrir ↗GitHub PoC★ 1
veloCloud VMWare - Vulnerability
VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web U
100RISCO
abrir ↗Exploit-DB
SynaMan 4.0 build 1488 - (Authenticated) Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2
23RISCO
abrir ↗Metasploit600
Adobe ColdFusion CKEditor unrestricted file upload
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Android - 'zygote->init;' Chain from USB Privilege Escalation
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lead
23RISCO
abrir ↗GitHub PoC★ 7
C# implementation of BasuCert/WinboxPoC [Winbox Critical Vulnerability (CVE-2018-14847)]
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISCO
abrir ↗VulnCheck XDB
initial-access
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Apache Struts 2 - Namespace Redirect OGNL Injection (Metasploit)
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ghostscript - Failed Restore Command Execution (Metasploit)
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin
60RISCO
abrir ↗GitHub PoC★ 2
Simple poc of CVE-2018-8353 Microsoft Scripting Engine Use After Free
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
35RISCO
abrir ↗Metasploit300
Cisco RV320 and RV325 Unauthenticated Remote Code Execution
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗Metasploit300
Cisco RV320 and RV325 Unauthenticated Remote Code Execution
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗Exploit-DB
QNAP Photo Station 5.7.0 - Cross-Site Scripting
Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inje
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Jorani Leave Management 0.6.5 - (Authenticated) 'startdate' SQL Injection
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permission
23RISCO
abrir ↗Exploit-DB
WirelessHART Fieldgate SWG70 3.0 - Directory Traversal
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename par
43RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.