Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit300

Netgear SPH200D Directory Traversal Vulnerability

CVE-2013-10063MEDIUM

Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

28RISCO

abrir ↗

Metasploit300

Nginx Source Code Disclosure/Download

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RISCO

abrir ↗

Metasploit300

Novell Zenworks Mobile Device Management Admin Credentials

CVE-2013-1081—

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote at

50RISCO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3498—

IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when sessi

23RISCO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3398—

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the

23RISCO

abrir ↗

Metasploit300

Ruby on Rails JSON Processor YAML Deserialization Scanner

CVE-2013-0333—

lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly

60RISCO

abrir ↗

Metasploit300

Ruby on Rails XML Processor YAML Deserialization Scanner

CVE-2013-0156—

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISCO

abrir ↗

Metasploit300

FreeBSD Remote NFS RPC Request Denial of Service

CVE-2006-0900—

nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demo

50RISCO

abrir ↗

Metasploit300

ISC DHCP Zero Length ClientID Denial of Service Module

CVE-2010-2156—

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service (server exit)

60RISCO

abrir ↗

Metasploit300

Apache Reverse Proxy Bypass Vulnerability Scanner

CVE-2011-3368—

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does

60RISCO

abrir ↗

Metasploit300

RIPS Scanner Directory Traversal

CVE-2025-34126HIGH

RIPS Scanner v0.54 Path Traversal

36RISCO

abrir ↗

Metasploit300

Apache Tomcat User Enumeration

CVE-2009-0580—

Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, al

60RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-3548—

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a

60RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2010-4094—

The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN acc

50RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2010-0557—

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial

50RISCO

abrir ↗

Metasploit300

Cross Platform Webkit File Dropper

CVE-2011-1774—

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbi

50RISCO

abrir ↗

Metasploit300

TeamViewer Unquoted URI Handler SMB Redirect

CVE-2020-13699—

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could

23RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-4188—

HP Operations Dashboard has a default password of j2deployer for the j2deployer account, which allows remote attackers t

50RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-4189—

HP Operations Manager has a default password of OvW*busr1 for the ovwebusr account, which allows remote attackers to exe

60RISCO

abrir ↗

Metasploit300

WebEx Remote Command Execution Utility

CVE-2018-15442HIGH

Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

61RISCO

abrir ↗

Metasploit300

X11 No-Auth Scanner

CVE-1999-0526—

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

23RISCO

abrir ↗

Metasploit300

Tomcat Application Manager Login Utility

CVE-2009-3843—

HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which all

60RISCO

abrir ↗

Metasploit300

WinRM Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

TP-Link Wireless Lite N Access Point Directory Traversal Vulnerability

CVE-2012-5687—

Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13

50RISCO

abrir ↗

Metasploit300

HTTP Cross-Site Tracing Detection

CVE-2005-3398—

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the

23RISCO

abrir ↗

Metasploit300

WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal

CVE-2012-4031—

Multiple directory traversal vulnerabilities in src/acloglogin.php in Wangkongbao CNS-1000 and 1100 allow remote attacke

50RISCO

abrir ↗

Metasploit300

VNC Authentication None Detection

CVE-2006-2369—

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers t

60RISCO

abrir ↗

Metasploit300

HTTP WebDAV Internal IP Scanner

CVE-2002-0422—

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whic

30RISCO

abrir ↗

Metasploit300

VNC Authentication Scanner

CVE-1999-0506—

A Windows NT domain user or administrator account has a default, null, blank, or missing password.

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.