Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.151exploits catalogados

35.370CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8.617Nuclei 4.257Metasploit 3.474✓ só verificadosrecentes populares risco

14.119 exploits

GitHub PoC★ 2

Shadowshusky/CVE-2018-2628all

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC

shaoshore/CVE-2018-2628

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC

mudhappy/Wordpress-Hack-CVE-2018-6389

CVE-2018-6389—20 abr 2018

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISCO

abrir ↗

GitHub PoC★ 1

xssfile/CVE-2017-8464-EXP

CVE-2017-8464HIGHsob ataque20 abr 2018

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

100RISCO

abrir ↗

GitHub PoC★ 119

macOS 10.13.3 (17D47) Safari Wasm Exploit

CVE-2018-4121—19 abr 2018

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud b

28RISCO

abrir ↗

GitHub PoC★ 1

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 1

9uest/CVE-2018-2628

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 11

Exploit for CVE-2018-7600.. called drupalgeddon2,

CVE-2018-7600CRITICALsob ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 20

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 14

jiansiting/weblogic-cve-2018-2628

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 15

WebLogic WLS核心组件反序列化漏洞多线程批量检测脚本 CVE-2018-2628-MultiThreading

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 2

zjxzjx/CVE-2018-2628-detect

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 78

CVE-2018-2628 & CVE-2018-2893

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2018-2628

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 141

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware17 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 24

POC for CVE-2018-1273

CVE-2018-1273CRITICALsob ataqueransomware17 abr 2018

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property

100RISCO

abrir ↗

GitHub PoC★ 1

This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).

CVE-2017-8046—16 abr 2018

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RISCO

abrir ↗

GitHub PoC★ 71

CVE-2018-7600 - Drupal 7.x RCE

CVE-2018-7600CRITICALsob ataqueransomware16 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 7

Proof-of-Concept for Drupal CVE-2018-7600 / SA-CORE-2018-002

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 3

Tool to check for CVE-2018-7600 vulnerability on several URLS

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 4

Testing and exploitation tool for Drupalgeddon 2 (CVE-2018-7600)

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 41

CVE-2018-6546-Exploit

CVE-2018-6546—15 abr 2018

plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming

28RISCO

abrir ↗

GitHub PoC★ 7

Drupal 0day Remote PHP Code Execution (Perl)

CVE-2018-7600CRITICALsob ataqueransomware14 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 5

MSF exploit module for Drupalgeddon 2 (CVE-2018-7600 / SA-CORE-2018-002)

CVE-2018-7600CRITICALsob ataqueransomware14 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 4

PoC for CVE-2018-7600 Drupal SA-CORE-2018-002 (Drupalgeddon 2).

CVE-2018-7600CRITICALsob ataqueransomware14 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 10

Environment for CVE-2018-1273 (Spring Data Commons)

CVE-2018-1273CRITICALsob ataqueransomware13 abr 2018

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property

100RISCO

abrir ↗

GitHub PoC★ 3

CVE-2018-7600 (Drupal)

CVE-2018-7600CRITICALsob ataqueransomware13 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 600

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

CVE-2018-7600CRITICALsob ataqueransomware12 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC

Example exploit for CVE-2016-5195

CVE-2016-5195HIGHsob ataque11 abr 2018

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

abrir ↗

GitHub PoC★ 14

Fixed No Virus Manual Automatic Loader exe no zip because zip picks up the anti virus detector.

CVE-2017-0213HIGHsob ataqueransomware10 abr 2018

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Ser

93RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.