Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

3.502 exploits

Metasploit300

Argus Surveillance DVR 4.0.0.0 - Directory Traversal

CVE-2018-15745—

Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F

60RISCO

abrir ↗

Metasploit300

Apache Rave User Information Disclosure

CVE-2013-1814—

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain s

60RISCO

abrir ↗

Metasploit300

Android Open Source Platform (AOSP) Browser UXSS

CVE-2014-6041—

The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribu

23RISCO

abrir ↗

Metasploit300

Android Content Provider File Disclosure

CVE-2010-4804—

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR

43RISCO

abrir ↗

Metasploit300

Adobe ColdFusion Unauthenticated Arbitrary File Read

CVE-2023-26360HIGHsob ataque

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RISCO

abrir ↗

Metasploit300

Acronis Cyber Protect/Backup machine info disclosure

CVE-2022-30995CRITICAL

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Prot

43RISCO

abrir ↗

Metasploit300

Acronis Cyber Protect/Backup machine info disclosure

CVE-2022-3405CRITICAL

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following

43RISCO

abrir ↗

Metasploit300

BADPDF Malicious PDF Creator

CVE-2018-4993—

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier

40RISCO

abrir ↗

Metasploit300

Microsoft Windows Browser Pool DoS

CVE-2011-0654—

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in

50RISCO

abrir ↗

Metasploit300

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS

CVE-2010-2550—

The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2

60RISCO

abrir ↗

Metasploit300

Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop

CVE-2010-0017—

Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB serv

50RISCO

abrir ↗

Metasploit300

Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference

CVE-2009-3103—

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RISCO

abrir ↗

Metasploit300

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

CVE-2009-3103—

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window

60RISCO

abrir ↗

Metasploit300

Microsoft SRV.SYS WriteAndX Invalid DataOffset

CVE-2008-4114—

srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1

50RISCO

abrir ↗

Metasploit300

Microsoft SRV.SYS Pipe Transaction No Null

CVE-2006-3942—

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a de

60RISCO

abrir ↗

Metasploit300

Microsoft Plug and Play Service Registry Overflow

CVE-2005-2120—

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1

50RISCO

abrir ↗

Metasploit300

Solaris LPD Arbitrary File Delete

CVE-2005-4797—

Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to

23RISCO

abrir ↗

Metasploit300

Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service

CVE-2015-5374—

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;

60RISCO

abrir ↗

Metasploit300

DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)

CVE-2017-7924—

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L

23RISCO

abrir ↗

Metasploit300

Samba read_nttrans_ea_list Integer Overflow

CVE-2013-4124—

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.

50RISCO

abrir ↗

Metasploit300

Samba lsa_io_trans_names Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

Samba lsa_io_privilege_set Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

RPC DoS targeting *nix rpcbind/libtirpc

CVE-2017-8779—

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t

60RISCO

abrir ↗

Metasploit300

Memcached Remote Denial of Service

CVE-2011-4971—

Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin

23RISCO

abrir ↗

Metasploit300

ws - Denial of Service

CVE-2016-10542—

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date

18RISCO

abrir ↗

Metasploit300

WordPress Traversal Directory DoS

CVE-2016-6897—

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.

43RISCO

abrir ↗

Metasploit300

ua-parser-js npm module ReDoS

CVE-2017-16086—

ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial o

18RISCO

abrir ↗

Metasploit300

Tautulli v2.1.9 - Shutdown Denial of Service

CVE-2019-19833—

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous a

23RISCO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Metasploit300

FreeBSD Remote NFS RPC Request Denial of Service

CVE-2006-0900—

nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demo

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.