Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
8.216 exploits
VulnCheck XDB
remote-with-credentials
CVE-2020-8816CRITICALsob ataque04 ago 2020
Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-17558HIGHsob ataque04 ago 2020
Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A V
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-3452HIGHsob ataque03 ago 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-398003 ago 2020
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to
23RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2020-1350CRITICALsob ataque01 ago 2020
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2017-804601 ago 2020
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri
60RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-3452HIGHsob ataque01 ago 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2016-3088CRITICALsob ataque31 jul 2020
The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-8174HIGHsob ataqueransomware31 jul 2020
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALsob ataqueransomware30 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir
VulnCheck XDB
local
CVE-2020-1071329 jul 2020
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB veri
23RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-289328 jul 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
60RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-3452HIGHsob ataque28 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-3396CRITICALsob ataqueransomware27 jul 2020
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2020-061027 jul 2020
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-11510CRITICALsob ataqueransomware27 jul 2020
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2019-19781CRITICALsob ataqueransomware27 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir
VulnCheck XDB
local
CVE-2020-9934MEDIUMsob ataque27 jul 2020
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue
78RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2015-856225 jul 2020
Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbi
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-3452HIGHsob ataque25 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
local
CVE-2020-1054HIGHsob ataque25 jul 2020
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle o
98RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-3452HIGHsob ataque24 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-3452HIGHsob ataque24 jul 2020
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2017-11826HIGHsob ataque23 jul 2020
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Serv
93RISCO
abrir
VulnCheck XDB
client-side
CVE-2017-8759HIGHsob ataque23 jul 2020
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely vi
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-2555CRITICALsob ataque22 jul 2020
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-6287CRITICALsob ataque21 jul 2020
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-6287CRITICALsob ataque20 jul 2020
SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication c
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2020-1350CRITICALsob ataque17 jul 2020
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle req
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALsob ataqueransomware17 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir
anteriorpágina 239 / 274próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.