Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados

32.083CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.934GitHub PoC 13.235VulnCheck XDB 8.150Nuclei 4.193Metasploit 3.462✓ só verificadosrecentes populares risco

22.786 exploits

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002003—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002002—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002004—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002000—18 set 2018

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require ad

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002001—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002009—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002005—18 set 2018

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:4

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002006—18 set 2018

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002008—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

WordPress Plugin Arigato Autoresponder and Newsletter 2.5 - Blind SQL Injection / Reflected Cross-Site Scripting

CVE-2018-1002007—18 set 2018

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability re

23RISCO

Exploit-DB

Solaris - libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

CVE-2006-4842—18 set 2018

The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v

38RISCO

Exploit-DB

CA Release Automation NiMi 6.5 - Remote Command Execution

CVE-2018-15691—17 set 2018

Insecure deserialization of a specially crafted serialized object, in CA Release Automation 6.5 and earlier, allows atta

28RISCO

Exploit-DB

Joomla! Component JCK Editor 6.4.4 - 'parent' SQL Injection

CVE-2018-17254—17 set 2018

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.

60RISCO

Exploit-DB

Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)

CVE-2018-10576—14 set 2018

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentica

23RISCO

Exploit-DB

Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)

CVE-2018-10577—14 set 2018

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices w

23RISCO

Exploit-DB

Watchguard AP100 AP102 AP200 1.2.9.15 - Remote Code Execution (Metasploit)

CVE-2018-10575—14 set 2018

An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentia

23RISCO

Exploit-DB

Apache Syncope 2.0.7 - Remote Code Execution

CVE-2018-1322—13 set 2018

An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupporte

28RISCO

Exploit-DB

Apache Portals Pluto 3.0.0 - Remote Code Execution

CVE-2018-1306—13 set 2018

The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote a

35RISCO

Exploit-DB

Apache Syncope 2.0.7 - Remote Code Execution

CVE-2018-1321—13 set 2018

An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and un

28RISCO

Exploit-DB

CirCarLife SCADA 4.3.0 - Credential Disclosure

CVE-2018-12634—12 set 2018

CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive information via a direct request for the html/lo

50RISCO

Exploit-DB

MyBB 1.8.17 - Cross-Site Scripting

CVE-2018-15596—12 set 2018

An issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can gener

23RISCO

Exploit-DB

LG Smart IP Camera 1508190 - Backup File Download

CVE-2018-16946—12 set 2018

LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /u

23RISCO

Exploit-DB

Rubedo CMS 3.4.0 - Directory Traversal

CVE-2018-16836—12 set 2018

Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attac

50RISCO

Exploit-DB

IBM Identity Governance and Intelligence 5.2.3.2 / 5.2.4 - SQL Injection

CVE-2018-1756HIGH12 set 2018

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker co

46RISCO

Exploit-DB

SynaMan 4.0 build 1488 - (Authenticated) Cross-Site Scripting

CVE-2018-10763—12 set 2018

Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2

23RISCO

Exploit-DB

Apple macOS 10.13.4 - Denial of Service (PoC)

CVE-2018-4240—12 set 2018

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS b

23RISCO

Exploit-DB

SynaMan 4.0 build 1488 - SMTP Credential Disclosure

CVE-2018-10814—12 set 2018

Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

23RISCO

Exploit-DB

Apache Struts 2 - Namespace Redirect OGNL Injection (Metasploit)

CVE-2018-11776HIGHsob ataque10 set 2018

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

Exploit-DB

Ghostscript - Failed Restore Command Execution (Metasploit)

CVE-2018-16509—10 set 2018

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handlin

60RISCO

Exploit-DB

QNAP Photo Station 5.7.0 - Cross-Site Scripting

CVE-2018-0715—07 set 2018

Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inje

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.