Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.949exploits catalogados

34.636CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.662GitHub PoC 13.734VulnCheck XDB 8.410Nuclei 4.233Metasploit 3.467✓ só verificadosrecentes populares risco

8.410 exploits

VulnCheck XDB

initial-access

CVE-2018-10562CRITICALsob ataqueransomware17 mai 2018

An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_ac

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-5638CRITICALsob ataqueransomware13 mai 2018

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-10299—11 mai 2018

An integer overflow in the batchTransfer function of a smart contract implementation for Beauty Ecosystem Coin (BEC), th

23RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-7494CRITICALsob ataqueransomware10 mai 2018

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo

100RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2018-9995—09 mai 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2018-9995—08 mai 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque03 mai 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2018-9995—29 abr 2018

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-7269CRITICALsob ataque28 abr 2018

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware27 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware27 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware27 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-20149CRITICAL27 abr 2018

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chi

48RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2017-9506—25 abr 2018

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware17 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware17 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware16 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.