Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados
39.531CVEs com exploração pública
24.695testados em laboratório
84.035 exploits
Exploit-DB
DedeCMS v.5.8 - _keyword_ Cross-Site Scripting
CVE-2020-27533—webappsphp30 out 2020
A Cross Site Scripting (XSS) issue was discovered in the search feature of DedeCMS v.5.8 that allows malicious users to
23RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque30 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC
alexfrancow/CVE-2020-14882
CVE-2020-14882CRITICALsob ataque30 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2015-7858—29 out 2020
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RISCO
abrir ↗
GitHub PoC★ 17
CVE-2020-14882 Weblogic-Exp
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 2
Bash script to exploit the Oracle's Weblogic Unauthenticated Remote Command Execution - CVE-2020-14882
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 7
CVE-2020-14882 EXP 回显
CVE-2020-14882CRITICALsob ataque29 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
Metasploit600
Rapid7 Metasploit Framework msfvenom APK Template Command Injection
CVE-2020-7384HIGH29 out 2020
Client-Side Command Injection in Rapid7 Metasploit
68RISCO
abrir ↗
GitHub PoC
Un semplice exploit che sfrutta CVE-2015-7297, CVE-2015-7857 and CVE-2015-7858 per elencare gli utenti con la psw del db
CVE-2015-7297—29 out 2020
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un
60RISCO
abrir ↗
GitHub PoC★ 2
Scans for Microsoft Exchange Versions with masscan
CVE-2020-0688HIGHsob ataqueransomware29 out 2020
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o
100RISCO
abrir ↗
Metasploit600
Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution
CVE-2020-11854CRITICAL28 out 2020
Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.
85RISCO
abrir ↗
Metasploit600
Micro Focus Operations Bridge Manager Authenticated Remote Code Execution
CVE-2020-11853HIGH28 out 2020
Arbitrary code execution vulnerability on multiple Micro Focus products
58RISCO
abrir ↗
Metasploit600
Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution
CVE-2020-11853HIGH28 out 2020
Arbitrary code execution vulnerability on multiple Micro Focus products
58RISCO
abrir ↗
Exploit-DB
Blueman < 2.1.4 - Local Privilege Escalation
CVE-2020-15238HIGHlocallinux28 out 2020
Local privilege escalation Blueman
41RISCO
abrir ↗
GitHub PoC
Windows 7 LPE
CVE-2020-1054HIGHsob ataque28 out 2020
Win32k Elevation of Privilege Vulnerability
98RISCO
abrir ↗
Exploit-DB
Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion
CVE-2020-14864HIGHsob ataquewebappslinux28 out 2020
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Ins
100RISCO
abrir ↗
GitHub PoC★ 288
CVE-2020–14882、CVE-2020–14883
CVE-2020-14882CRITICALsob ataque28 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque28 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 29
CVE-2020–14882 by Jang
CVE-2020-14882CRITICALsob ataque28 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-14882CRITICALsob ataque28 out 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
Metasploit600
Micro Focus Operations Bridge Manager / Reporter Local Privilege Escalation
CVE-2020-11855—28 out 2020
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The
18RISCO
abrir ↗
Metasploit600
Micro Focus Operations Bridge Manager / Reporter Local Privilege Escalation
CVE-2020-11858HIGH28 out 2020
Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.
36RISCO
abrir ↗
VulnCheck XDB
local
CVE-2020-1054HIGHsob ataque28 out 2020
Win32k Elevation of Privilege Vulnerability
98RISCO
abrir ↗
Exploit-DB
Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)
CVE-2020-5791—webappsphp28 out 2020
Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi
60RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHsob ataque27 out 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗
GitHub PoC★ 14
PoC for old Binder vulnerability (based on P0 exploit)
CVE-2019-2215HIGHsob ataque27 out 2020
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗
Exploit-DB
Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)
CVE-2019-15813—webappsphp27 out 2020
Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arb
35RISCO
abrir ↗
← anteriorpágina 816 / 2.802próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.