Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
71.666exploits catalogados
32.032CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.896GitHub PoC 13.204VulnCheck XDB 8.127Nuclei 4.191Metasploit 3.462✓ só verificadosrecentespopularesrisco
22.786 exploits
Exploit-DB
Safari - Proxy Object Type Confusion (Metasploit)
In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improve
61RISCO
abrir ↗Exploit-DB
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISCO
abrir ↗Exploit-DB
Fortify Software Security Center (SSC) 17.10/17.20/18.10 - Information Disclosure (2)
MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
33RISCO
abrir ↗Exploit-DB
Huawei Router HG532e - Command Execution
Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary
28RISCO
abrir ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware
28RISCO
abrir ↗Exploit-DB
Safari - Proxy Object Type Confusion (Metasploit)
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud
68RISCO
abrir ↗Exploit-DB
Cisco RV110W - Password Disclosure / Command Execution
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell command
23RISCO
abrir ↗Exploit-DB
CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) au
43RISCO
abrir ↗Exploit-DB
WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affe
23RISCO
abrir ↗Exploit-DB
Huawei B315s-22 - Information Leak
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace
28RISCO
abrir ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.
28RISCO
abrir ↗Exploit-DB
Adobe ColdFusion 2018 - Arbitrary File Upload
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr
100RISCO
abrir ↗Exploit-DB
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper cha
55RISCO
abrir ↗Exploit-DB
DomainMOD 4.11.01 - Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
23RISCO
abrir ↗Exploit-DB
PrestaShop 1.6.x/1.7.x - Remote Code Execution
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file u
28RISCO
abrir ↗Exploit-DB
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Authentication Abuse vulnerability
41RISCO
abrir ↗Exploit-DB
XNU - POSIX Shared Memory Mappings have Incorrect Maximum Protection
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 1
23RISCO
abrir ↗Exploit-DB
ZTE ZXHN H168N - Improper Access Restrictions
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper acc
55RISCO
abrir ↗Exploit-DB
TP-Link wireless router Archer C1200 - Cross-Site Scripting
TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI.
23RISCO
abrir ↗Exploit-DB
McAfee True Key - McAfee.TrueKey.Service Privilege Escalation
True Key (TK) Windows Client - Privilege Escalation vulnerability
41RISCO
abrir ↗Exploit-DB
Kubernetes - (Unauthenticated) Arbitrary Requests
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RISCO
abrir ↗Exploit-DB
Kubernetes - (Authenticated) Arbitrary Requests
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RISCO
abrir ↗Exploit-DB
Adiscon LogAnalyzer < 4.1.7 - Cross-Site Scripting
login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field.
43RISCO
abrir ↗Exploit-DB
Rockwell Automation Allen-Bradley PowerMonitor 1000 - Incorrect Access Control Authentication Bypass
An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/rem
35RISCO
abrir ↗Exploit-DB
DomainMOD 4.11.01 - Registrar Cross-Site Scripting
DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.
38RISCO
abrir ↗Exploit-DB
HP Intelligent Management - Java Deserialization Remote Code Execution (Metasploit)
A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and e
60RISCO
abrir ↗Exploit-DB
NUUO NVRMini2 3.9.1 - (Authenticated) Command Injection
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reques
28RISCO
abrir ↗Exploit-DB
NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage
NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.
28RISCO
abrir ↗Exploit-DB
Xorg X11 Server (AIX) - Local Privilege Escalation
A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options wh
43RISCO
abrir ↗Exploit-DB
OpenSSH < 7.7 - User Enumeration (2)
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticati
70RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.