Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.155exploits catalogados
39.603CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.629Exploit-DB 24.485GitHub PoC 16.343VulnCheck XDB 9.680Nuclei 4.493Metasploit 3.525✓ só verificadosrecentespopularesrisco
84.155 exploits
GitHub PoC
yukar1z0e/CVE-2017-15944
CVE-2017-15944CRITICALsob ataque29 mai 2020
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-15944CRITICALsob ataque29 mai 2020
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RISCO
abrir ↗
GitHub PoC★ 5
The reproduction code for CVE-2019-8641.
CVE-2019-8641—29 mai 2020
An out-of-bounds read was addressed with improved input validation.
28RISCO
abrir ↗
GitHub PoC★ 2
This project for CVE-2019-18935
CVE-2019-18935CRITICALsob ataqueransomware29 mai 2020
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗
GitHub PoC
halsten/CVE-2020-0796
CVE-2020-0796CRITICALsob ataqueransomware28 mai 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-0796CRITICALsob ataqueransomware28 mai 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALsob ataqueransomware27 mai 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALsob ataqueransomware27 mai 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
GitHub PoC★ 55
CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本
CVE-2016-4437CRITICALsob ataque27 mai 2020
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2016-0728—27 mai 2020
The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref
23RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2016-4437CRITICALsob ataque27 mai 2020
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALsob ataqueransomware26 mai 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-0708CRITICALsob ataqueransomware26 mai 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
GitHub PoC
yukar1z0e/CVE-2019-19781
CVE-2019-19781CRITICALsob ataqueransomware26 mai 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Pi-hole 4.4.0 - Remote Code Execution (Authenticated)
CVE-2020-11108—webappslinux26 mai 2020
The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abus
60RISCO
abrir ↗
GitHub PoC
gothburz/cve-2020-8617
CVE-2020-8617HIGH26 mai 2020
A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c
78RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Plesk/myLittleAdmin - ViewState .NET Deserialization (Metasploit)
CVE-2020-13166—remotewindows25 mai 2020
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcod
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-2618—25 mai 2020
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S
35RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-18935CRITICALsob ataqueransomware25 mai 2020
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗
Exploit-DB✓ VexDay Proof
Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
CVE-2017-15889—remotehardware25 mai 2020
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authe
60RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-11651CRITICALsob ataque25 mai 2020
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISCO
abrir ↗
GitHub PoC★ 12
TelerikUI Vulnerability Scanner (CVE-2019-18935)
CVE-2019-18935CRITICALsob ataqueransomware25 mai 2020
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗
GitHub PoC★ 87
QNAP pre-auth root RCE Exploit (CVE-2019-7192 ~ CVE-2019-7195)
CVE-2019-7192CRITICALsob ataqueransomware24 mai 2020
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix the
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2019-7192CRITICALsob ataqueransomware24 mai 2020
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix the
100RISCO
abrir ↗
GitHub PoC★ 22
CVE-2020-2551 POC to use in Internet
CVE-2020-2551CRITICALsob ataque24 mai 2020
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor
100RISCO
abrir ↗
GitHub PoC★ 5
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS)
CVE-2020-7961CRITICALsob ataque23 mai 2020
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-7961CRITICALsob ataque23 mai 2020
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir ↗
GitHub PoC★ 1
vulnerabilidad CVE-2019-0708 testing y explotacion
CVE-2019-0708CRITICALsob ataqueransomware23 mai 2020
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2016-5734—22 mai 2020
phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to
60RISCO
abrir ↗
GitHub PoC
saltstack CVE-2020-11652
CVE-2020-11652MEDIUMsob ataque22 mai 2020
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISCO
abrir ↗
← anteriorpágina 842 / 2.806próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.