Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados
31.617CVEs com exploração pública
0testados em laboratório
TodosExploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8.069Nuclei 4.187Metasploit 3.462✓ só verificadosrecentespopularesrisco
19.791 exploits
Referência
CVE-2016-6600
CVE-2016-6600—
Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remot
60RISCO
abrir ↗
Referência
CVE-2021-42321
CVE-2021-42321HIGHsob ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Referência
CVE-2021-42321
CVE-2021-42321HIGHsob ataqueransomware
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir ↗
Referência
CVE-2022-31137
CVE-2022-31137CRITICAL
Unauthenticated Remote Code Execution in Roxy-WI
85RISCO
abrir ↗
Referência
CVE-2022-31137
CVE-2022-31137CRITICAL
Unauthenticated Remote Code Execution in Roxy-WI
85RISCO
abrir ↗
Referência
CVE-2022-31137
CVE-2022-31137CRITICAL
Unauthenticated Remote Code Execution in Roxy-WI
85RISCO
abrir ↗
Referência
CVE-2022-31137
CVE-2022-31137CRITICAL
Unauthenticated Remote Code Execution in Roxy-WI
85RISCO
abrir ↗
Referência
Microsoft Windows - DHCP Client Broadcast (MS06-036)
CVE-2006-2372—
Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to
45RISCO
abrir ↗
Referência
CVE-2009-3103
CVE-2009-3103—
Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Window
60RISCO
abrir ↗
Referência
CVE-2017-9554
CVE-2017-9554—
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo
60RISCO
abrir ↗
Referência
CVE-2023-40044
CVE-2023-40044CRITICALsob ataqueransomware
WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
100RISCO
abrir ↗
Referência
CVE-2009-3960
CVE-2009-3960MEDIUMsob ataqueransomware
Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Service
100RISCO
abrir ↗
Referência
CVE-2020-17463
CVE-2020-17463CRITICALsob ataque
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
100RISCO
abrir ↗
Referência
CVE-2017-8464
CVE-2017-8464HIGHsob ataque
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗
Referência
CVE-2017-8464
CVE-2017-8464HIGHsob ataque
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201
100RISCO
abrir ↗
Referência
CVE-2019-12725
CVE-2019-12725—
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap
60RISCO
abrir ↗
Referência
CVE-2019-12725
CVE-2019-12725—
Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web ap
60RISCO
abrir ↗
Referência
CVE-2017-3599
CVE-2017-3599—
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions t
45RISCO
abrir ↗
Referência
CVE-2018-11776
CVE-2018-11776HIGHsob ataque
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISCO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2017-0146
CVE-2017-0146HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2022-44268
CVE-2022-44268MEDIUM
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulti
55RISCO
abrir ↗
Referência
CVE-2016-1525
CVE-2016-1525—
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RISCO
abrir ↗
Referência
CVE-2016-1525
CVE-2016-1525—
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RISCO
abrir ↗
Referência
CVE-2016-1525
CVE-2016-1525—
Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allow
60RISCO
abrir ↗
Referência
CVE-2017-0145
CVE-2017-0145HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
Referência
CVE-2017-0145
CVE-2017-0145HIGHsob ataqueransomware
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
← anteriorpágina 14 / 660próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.