Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

3.502 exploits

Metasploit300

SNMP Community Login Scanner

CVE-1999-0508—

An account on a router, firewall, or other network device has a default, null, blank, or missing password.

18RISCO

Metasploit300

SNMP Enumeration Module

CVE-1999-0517MEDIUM

An SNMP community name is the default (e.g. public), null, or missing.

33RISCO

Metasploit300

SNMP Enumeration Module

CVE-1999-0516—

An SNMP community name is guessable.

23RISCO

Metasploit300

SNMP Enumeration Module

CVE-1999-0508—

An account on a router, firewall, or other network device has a default, null, blank, or missing password.

18RISCO

Metasploit300

Cambium ePMP 1000 SNMP Enumeration

CVE-2017-7922—

An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community string

18RISCO

Metasploit300

Cambium ePMP 1000 SNMP Enumeration

CVE-2017-7918—

An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration

18RISCO

Metasploit300

Cambium cnPilot r200/r201 SNMP Enumeration

CVE-2017-5262—

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access

18RISCO

Metasploit300

Arris DG950A Cable Modem Wifi Enumeration

CVE-2014-4863—

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote atta

23RISCO

Metasploit300

SMTP Open Relay Detection

CVE-1999-0512—

A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.

23RISCO

Metasploit300

SMTP User Enumeration Utility

CVE-1999-0531—

15RISCO

Metasploit300

Samba _netr_ServerPasswordSet Uninitialized Credential State

CVE-2015-0240—

The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1

60RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0148HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0147HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0146HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0143HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0145HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

MS17-010 SMB RCE Detection

CVE-2017-0144HIGHsob ataqueransomware

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

Metasploit300

SMB Login Check Scanner

CVE-1999-0506—

A Windows NT domain user or administrator account has a default, null, blank, or missing password.

23RISCO

Metasploit300

SMB Group Policy Preference Saved Passwords Enumeration

CVE-2014-1812HIGHsob ataqueransomware

The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

98RISCO

Metasploit300

Microsoft Windows Authenticated Logged In Users Enumeration

CVE-1999-0504—

A Windows NT local user or administrator account has a default, null, blank, or missing password.

50RISCO

Metasploit300

Sielco Sistemi Winlog Remote File Access

CVE-2012-4356—

Multiple directory traversal vulnerabilities in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA bef

43RISCO

Metasploit300

Moxa UDP Device Discovery

CVE-2016-9361CRITICAL

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52

48RISCO

Metasploit300

Indusoft WebStudio NTWebServer Remote File Access

CVE-2011-1900—

Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote att

30RISCO

Metasploit300

SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gathering

CVE-2006-6010—

SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an

23RISCO

Metasploit300

SAP URL Scanner

CVE-2010-0738MEDIUMsob ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RISCO

Metasploit300

SAP Host Agent Information Disclosure

CVE-2013-3319—

The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitiv

23RISCO

Metasploit300

rsh Authentication Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

Metasploit300

WordPress GI-Media Library Plugin Directory Traversal Vulnerability

CVE-2015-10136HIGH

GI-Media Library < 3.0 - Directory Traversal

36RISCO

Metasploit300

WordPress DukaPress Plugin File Read Vulnerability

CVE-2014-8799—

Directory traversal vulnerability in the dp_img_resize function in php/dp-functions.php in the DukaPress plugin before 2

50RISCO

Metasploit300

Wordpress XML-RPC Username/Password Login Scanner

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.