Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.508exploits catalogados

40.258CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4.547Metasploit 3.532✓ só verificadosrecentes populares risco

86.508 exploits

Exploit-DB

Cobub Razor 0.8.0 - Physical Path Leakage

CVE-2018-8056—webappsphp20 abr 2018

Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via an invalid channel_name parameter to /index.php?/ma

28RISCO

abrir ↗

GitHub PoC

shaoshore/CVE-2018-2628

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 1

xssfile/CVE-2017-8464-EXP

CVE-2017-8464HIGHsob ataque20 abr 2018

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

GitHub PoC

CalderaForms 1.5.9.1 XSS (WordPress plugin) - tutorial

CVE-2018-7747—20 abr 2018

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC

mudhappy/Wordpress-Hack-CVE-2018-6389

CVE-2018-6389—20 abr 2018

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2018-7600.. called drupalgeddon2,

CVE-2018-7600CRITICALsob ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 1

9uest/CVE-2018-2628

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 119

macOS 10.13.3 (17D47) Safari Wasm Exploit

CVE-2018-4121—19 abr 2018

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud b

28RISCO

abrir ↗

Exploit-DB

Kodi 17.6 - Persistent Cross-Site Scripting

CVE-2018-8831—webappsmultiple18 abr 2018

A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/s

35RISCO

abrir ↗

Exploit-DB

WordPress Plugin Caldera Forms 1.5.9.1 - Cross-Site Scripting

CVE-2018-7747—webappsphp18 abr 2018

Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow re

23RISCO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10077—webappsxml18 abr 2018

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to re

23RISCO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10078—webappsxml18 abr 2018

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to i

23RISCO

abrir ↗

Exploit-DB

Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities

CVE-2018-10079—webappsxml18 abr 2018

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users

23RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Match Clone Script 1.0.4 - Cross-Site Scripting

CVE-2018-9857—webappsphp18 abr 2018

PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" sc

23RISCO

abrir ↗

GitHub PoC★ 2

zjxzjx/CVE-2018-2628-detect

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 14

jiansiting/weblogic-cve-2018-2628

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 20

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

Exploit-DB

Lutron Quantum 2.0 - 3.2.243 - Information Disclosure

CVE-2018-8880—webappshardware18 abr 2018

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing th

28RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 15

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 78

CVE-2018-2628 & CVE-2018-2893

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.