Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentespopularesrisco
3.462 exploits
Metasploit300
EasyCafe Server Remote File Access
CVE-2025-34119HIGH
EasyCafe Server 2.2.14 Remote File Disclosure via Opcode 0x43
36RISCO
abrir ↗
Metasploit300
Ulterius Server File Download Vulnerability
CVE-2017-16806—
The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory
60RISCO
abrir ↗
Metasploit300
TYPO3 sa-2010-020 Remote File Disclosure
CVE-2010-3714—
The jumpUrl (aka access tracking) implementation in tslib/class.tslib_fe.php in TYPO3 4.2.x before 4.2.15, 4.3.x before
43RISCO
abrir ↗
Metasploit300
Novell ZENworks Configuration Management Preboot Service Remote File Access
CVE-2012-2215—
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1
23RISCO
abrir ↗
Metasploit300
MSSQL Login Utility
CVE-1999-0506—
A Windows NT domain user or administrator account has a default, null, blank, or missing password.
23RISCO
abrir ↗
Metasploit300
MySQL Login Utility
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
NFS Mount Scanner
CVE-1999-0554—
NFS exports system-critical data to the world, e.g. / or a password file.
23RISCO
abrir ↗
Metasploit300
NFS Mount Scanner
CVE-1999-0170—
Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.
23RISCO
abrir ↗
Metasploit300
NNTP Login Utility
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
NTP Monitor List Scanner
CVE-2013-5211—
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service
60RISCO
abrir ↗
Metasploit300
NTP "NAK to the Future"
CVE-2015-7871—
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authen
40RISCO
abrir ↗
Metasploit300
NTP Clock Variables Disclosure
CVE-2013-5211—
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service
60RISCO
abrir ↗
Metasploit300
Oracle RDBMS Login Utility
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
PcAnywhere Login Scanner
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
Portmapper Amplification Scanner
CVE-2013-5211—
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service
60RISCO
abrir ↗
Metasploit300
PostgreSQL Database Name Command Line Flag Injection
CVE-2013-1899—
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows re
30RISCO
abrir ↗
Metasploit300
PostgreSQL Login Utility
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
MS12-020 Microsoft Remote Desktop Checker
CVE-2012-0002—
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V
60RISCO
abrir ↗
Metasploit300
rexec Authentication Scanner
CVE-1999-0651—
The rsh/rlogin service is running.
23RISCO
abrir ↗
Metasploit300
rexec Authentication Scanner
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
rlogin Authentication Scanner
CVE-1999-0651—
The rsh/rlogin service is running.
23RISCO
abrir ↗
Metasploit300
rlogin Authentication Scanner
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
rsh Authentication Scanner
CVE-1999-0651—
The rsh/rlogin service is running.
23RISCO
abrir ↗
Metasploit300
rsh Authentication Scanner
CVE-1999-0502—
A Unix account has a default, null, blank, or missing password.
50RISCO
abrir ↗
Metasploit300
SAP Host Agent Information Disclosure
CVE-2013-3319—
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitiv
23RISCO
abrir ↗
Metasploit300
Novell File Reporter Agent Arbitrary File Delete
CVE-2011-2750—
NFRAgent.exe in Novell File Reporter 1.0.4.2 and earlier allows remote attackers to delete arbitrary files via a full pa
23RISCO
abrir ↗
Metasploit300
SAP URL Scanner
CVE-2010-0738MEDIUMsob ataqueransomware
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
100RISCO
abrir ↗
Metasploit300
SAP /sap/bc/soap/rfc SOAP Service RFC_SYSTEM_INFO Function Sensitive Information Gathering
CVE-2006-6010—
SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an
23RISCO
abrir ↗
Metasploit300
Indusoft WebStudio NTWebServer Remote File Access
CVE-2011-1900—
Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 6.1 and 7.x before 7.0+Patch 1 allows remote att
30RISCO
abrir ↗
Metasploit300
Moxa UDP Device Discovery
CVE-2016-9361CRITICAL
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 52
48RISCO
abrir ↗
← anteriorpágina 113 / 116próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.