Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
84.150exploits catalogados
39.601CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9.680Nuclei 4.488Metasploit 3.525✓ só verificadosrecentespopularesrisco
84.150 exploits
VulnCheck XDB
local
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif
86RISCO
abrir ↗GitHub PoC★ 2
reversebrain/CVE-2019-18988
TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif
86RISCO
abrir ↗Metasploit200
F5 BIG-IP TMUI Directory Traversal and File Upload RCE
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗Metasploit600
openSIS Unauthenticated PHP Code Execution
openSIS through 7.4 allows SQL Injection.
30RISCO
abrir ↗Metasploit600
openSIS Unauthenticated PHP Code Execution
openSIS through 7.4 has Incorrect Access Control.
30RISCO
abrir ↗Metasploit600
openSIS Unauthenticated PHP Code Execution
openSIS through 7.4 allows Directory Traversal.
30RISCO
abrir ↗VulnCheck XDB
initial-access
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th
100RISCO
abrir ↗VulnCheck XDB
local
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperl
98RISCO
abrir ↗GitHub PoC★ 1
Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure (Python3)
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote
60RISCO
abrir ↗GitHub PoC★ 19
CVE-2013-2028 python exploit
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cau
60RISCO
abrir ↗GitHub PoC
cyberharsh/Shellbash-CVE-2014-6271
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗Exploit-DB
mySCADA myPRO 7 - Hardcoded Credentials
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attack
28RISCO
abrir ↗VulnCheck XDB
remote-with-credentials
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RISCO
abrir ↗GitHub PoC★ 1
cyberharsh/DrupalCVE-2018-7602
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
100RISCO
abrir ↗GitHub PoC★ 1
cyberharsh/Oracle-mysql-CVE-2012-2122
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor
60RISCO
abrir ↗GitHub PoC
cyberharsh/Php-unit-CVE-2017-9841
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISCO
abrir ↗GitHub PoC
cyberharsh/Tomcat-CVE-2017-12615
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisati
100RISCO
abrir ↗GitHub PoC
Bludit 3.9.2 - bruteforce bypass - CVE-2019-17240
bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypass a brute-force protection mechanism by using many
40RISCO
abrir ↗Exploit-DB
Lansweeper 7.2 - Incorrect Access Control
Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin accoun
28RISCO
abrir ↗Exploit-DB
WebPort 1.19.1 - Reflected Cross-Site Scripting
Web Port 1.19.1 allows XSS via the /log type parameter.
38RISCO
abrir ↗GitHub PoC★ 1
Python version of Metasploit exploit for CVE-2004-1561
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with
60RISCO
abrir ↗Metasploit600
Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution
Rockwell Automation FactoryTalk View SE
40RISCO
abrir ↗Metasploit600
Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution
Rockwell Automation FactoryTalk View SE
48RISCO
abrir ↗GitHub PoC
cyberharsh/Groovy-scripting-engine-CVE-2015-1427
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the s
100RISCO
abrir ↗Metasploit600
Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution
Rockwell Automation FactoryTalk View SE
75RISCO
abrir ↗Exploit-DB
FileRun 2019.05.21 - Reflected Cross-Site Scripting
FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman§ion=do&page=up URI. This issue has been fixed
23RISCO
abrir ↗Exploit-DB
WebPort 1.19.1 - 'setup' Reflected Cross-Site Scripting
Web Port 1.19.1 allows XSS via the /access/setup type parameter.
23RISCO
abrir ↗GitHub PoC★ 3
cyberharsh/Nginx-CVE-2013-4547
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescap
35RISCO
abrir ↗GitHub PoC
cdedmondson/Modified-CVE-2019-15107
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.