Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.980exploits catalogados

36.899CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.400GitHub PoC 15.250VulnCheck XDB 8.959Nuclei 4.393Metasploit 3.502✓ só verificadosrecentes populares risco

3.502 exploits

Metasploit300

Novell eDirectory eMBox Unauthenticated File Access

CVE-2008-0926—

The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on clien

50RISCO

abrir ↗

Metasploit300

Novell eDirectory DHOST Predictable Session Cookie

CVE-2009-4655—

The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote att

50RISCO

abrir ↗

Metasploit300

Active Directory Certificate Services (ADCS) privilege escalation (Certifried)

CVE-2022-26923HIGHsob ataque

Active Directory Domain Services Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Metasploit300

Netlogon Weak Cryptographic Authentication

CVE-2020-1472MEDIUMsob ataqueransomware

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

Metasploit300

HP Intelligent Management IctDownloadServlet Directory Traversal

CVE-2012-5204—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RISCO

abrir ↗

Metasploit300

Veritas Backup Exec Server Registry Access

CVE-2005-0771—

VERITAS Backup Exec Server (beserver.exe) 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify

30RISCO

abrir ↗

Metasploit300

Veritas Backup Exec Windows Remote File Access

CVE-2005-2611—

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for

60RISCO

abrir ↗

Metasploit300

HP Intelligent Management FaultDownloadServlet Directory Traversal

CVE-2012-5202—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Netw

23RISCO

abrir ↗

Metasploit300

Android Browser RCE Through Google Play Store XFO

CVE-2014-6041—

The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribu

23RISCO

abrir ↗

Metasploit300

HP Intelligent Management BIMS DownloadServlet Directory Traversal

CVE-2013-4823—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Branch Intelligent Management System Soft

30RISCO

abrir ↗

Metasploit300

HTTP Host Header Injection Detection

CVE-2016-10073—

The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the emai

60RISCO

abrir ↗

Metasploit300

Novell Groupwise Agents HTTP Directory Traversal

CVE-2012-0419—

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 be

30RISCO

abrir ↗

Metasploit300

Embedthis GoAhead Embedded Web Server Directory Traversal

CVE-2014-9707—

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot

23RISCO

abrir ↗

Metasploit300

GlassFish Brute Force Utility

CVE-2011-0807—

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati

50RISCO

abrir ↗

Metasploit300

Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database

CVE-2017-5146—

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers

18RISCO

abrir ↗

Metasploit300

FortiMail Unauthenticated Login Bypass Scanner

CVE-2020-9294—

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an

40RISCO

abrir ↗

Metasploit300

Cambium ePMP 1000 Account Password Reset

CVE-2017-5254—

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the

30RISCO

abrir ↗

Metasploit300

Cambium ePMP 1000 'ping' Command Injection (up to v2.5)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner

CVE-2009-1122—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U

60RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Auth Bypass Directory Scanner

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RISCO

abrir ↗

Metasploit300

Cambium ePMP 1000 'get_chart' Command Injection (v3.1-3.5-RC7)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RISCO

abrir ↗

Metasploit300

D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

Emby Version Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RISCO

abrir ↗

Metasploit300

D-Link DIR-615H HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

D-Link DIR-300B / DIR-600B / DIR-815 / DIR-645 HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

ElasticSearch Snapshot API Directory Traversal

CVE-2015-5531—

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp

60RISCO

abrir ↗

Metasploit300

WordPress Simple Backup File Read Vulnerability

CVE-2015-10134HIGH

Simple Backup <= 2.7.10 - Arbitrary File Download via Path Traversal

36RISCO

abrir ↗

Metasploit300

Emby SSRF HTTP Scanner

CVE-2020-26948—

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

40RISCO

abrir ↗

Metasploit300

WordPress NextGEN Gallery Directory Read Vulnerability

CVE-2015-9538—

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

23RISCO

abrir ↗

Metasploit300

WordPress Subscribe Comments File Read Vulnerability

CVE-2015-10133HIGH

Subscribe to Comments <= 2.1.2 - Local File Includion

36RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.