Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados
39.531CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.557Exploit-DB 24.485GitHub PoC 16.313VulnCheck XDB 9.678Nuclei 4.478Metasploit 3.524✓ só verificadosrecentespopularesrisco
84.035 exploits
VulnCheck XDB
initial-access
CVE-2015-4852CRITICALsob ataque16 nov 2020
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
100RISCO
abrir ↗
Metasploit600
Monitorr unauthenticated Remote Code Execution (RCE)
CVE-2020-28871—16 nov 2020
Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the s
40RISCO
abrir ↗
GitHub PoC★ 1
b1ack0wl/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 nov 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 1
nex1less/CVE-2015-4852
CVE-2015-4852CRITICALsob ataque16 nov 2020
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-1472MEDIUMsob ataqueransomware16 nov 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-15227HIGH15 nov 2020
Remote Code Execution vulnerability
68RISCO
abrir ↗
Metasploit600
WordPress AIT CSV Import Export Unauthenticated Remote Code Execution
CVE-2020-36849CRITICAL14 nov 2020
AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload
43RISCO
abrir ↗
GitHub PoC
rvermeulen/apache-struts-cve-2017-9805
CVE-2017-9805HIGHsob ataque13 nov 2020
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with a
100RISCO
abrir ↗
GitHub PoC★ 57
Exploit for Laravel Remote Code Execution with API_KEY (CVE-2018-15133)
CVE-2018-15133HIGHsob ataque13 nov 2020
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
Exploit-DB
Touchbase.io 1.10 - Stored Cross Site Scripting
CVE-2020-26218HIGHwebappsmultiple13 nov 2020
HTML Injection in touchbase.ai
41RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2018-15133HIGHsob ataque13 nov 2020
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir ↗
GitHub PoC★ 1
CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit
CVE-2020-25213CRITICALsob ataque13 nov 2020
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISCO
abrir ↗
Exploit-DB
October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)
CVE-2020-5295MEDIUMwebappsphp13 nov 2020
Local File read vulnerability in OctoberCMS
33RISCO
abrir ↗
Exploit-DB
OpenCart Theme Journal 3.1.0 - Sensitive Data Exposure
CVE-2020-15478—webappsphp13 nov 2020
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.
23RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2017-7921CRITICALsob ataque13 nov 2020
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
GitHub PoC★ 12
Hikvision IP camera access bypass exploit, developed by golang.
CVE-2017-7921CRITICALsob ataque13 nov 2020
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion (Metasploit)
CVE-2020-1938CRITICALsob ataquewebappsmultiple13 nov 2020
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
abrir ↗
GitHub PoC★ 36
海康威视未授权访问检测poc及口令爆破
CVE-2017-7921CRITICALsob ataque12 nov 2020
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
GitHub PoC
MuirlandOracle/CVE-2014-6271-IPFire
CVE-2014-6271CRITICALsob ataque12 nov 2020
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
GitHub PoC★ 2
A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server
CVE-2013-4730—12 nov 2020
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USE
50RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-7921CRITICALsob ataque12 nov 2020
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗
GitHub PoC★ 3
zavke/CVE-2020-10189-ManageEngine
CVE-2020-10189CRITICALsob ataque12 nov 2020
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALsob ataque12 nov 2020
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-10189CRITICALsob ataque12 nov 2020
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d
100RISCO
abrir ↗
GitHub PoC★ 7
Detection of RCE in Oracle's WebLogic Server CVE-2020-14882 / CVE-2020-14750
CVE-2020-14882CRITICALsob ataque12 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 5
xfiftyone/CVE-2020-14882
CVE-2020-14882CRITICALsob ataque12 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque11 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14883HIGHsob ataque11 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 7
Weblogic 身份认证绕过漏洞批量检测脚本
CVE-2020-14883HIGHsob ataque11 nov 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
Metasploit600
Acronis TrueImage XPC Privilege Escalation
CVE-2020-25736—11 nov 2020
Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC
18RISCO
abrir ↗
← anteriorpágina 813 / 2.802próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.