Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit300

Samba lsa_io_privilege_set Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

Samba lsa_io_trans_names Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

Samba read_nttrans_ea_list Integer Overflow

CVE-2013-4124—

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.

50RISCO

abrir ↗

Metasploit300

DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)

CVE-2017-7924—

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L

23RISCO

abrir ↗

Metasploit300

JBoss Status Servlet Information Gathering

CVE-2010-1429—

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 a

30RISCO

abrir ↗

Metasploit300

JBoss Status Servlet Information Gathering

CVE-2008-3273—

JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remot

30RISCO

abrir ↗

Metasploit300

Microsoft IIS HTTP Internal IP Disclosure

CVE-2002-0422—

IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (whic

30RISCO

abrir ↗

Metasploit300

Microsoft IIS HTTP Internal IP Disclosure

CVE-2000-0649—

IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page w

60RISCO

abrir ↗

Metasploit300

Httpdasm Directory Traversal

CVE-2010-10012HIGH

httpdASM 0.92 Path Traversal

36RISCO

abrir ↗

Metasploit300

HTTP Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service

CVE-2015-5374—

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01;

60RISCO

abrir ↗

Metasploit300

HP Intelligent Management SOM FileDownloadServlet Arbitrary Download

CVE-2013-4826—

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Mod

30RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.