Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.600exploits catalogados
39.734CVEs com exploração pública
24.695testados em laboratório
84.600 exploits
Metasploit600
Apache OFBiz XML-RPC Java Deserialization
CVE-2020-9496—13 jul 2020
XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
60RISCO
abrir ↗
Metasploit600
Apache OFBiz XML-RPC Java Deserialization
CVE-2023-51467—13 jul 2020
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
60RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2019-11043HIGHsob ataqueransomware13 jul 2020
Underflow in PHP-FPM can lead to RCE
100RISCO
abrir ↗
GitHub PoC
momika233/cve-2020-5902
CVE-2020-5902CRITICALsob ataqueransomware12 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 45
Citrix ADC从权限绕过到RCE
CVE-2020-8193MEDIUMsob ataque12 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
GitHub PoC★ 6
This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerability CVE-2020-8193, CVE-2020-8195 and CVE-2020-8196 (disclosed July 08, 2020).
CVE-2020-8193MEDIUMsob ataque12 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-8193MEDIUMsob ataque12 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
GitHub PoC
freeFV/CVE-2020-5902-fofa-scan
CVE-2020-5902CRITICALsob ataqueransomware12 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-8193MEDIUMsob ataque12 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-5902CRITICALsob ataqueransomware11 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC
Exploits for CVE-2020-5902 POC
CVE-2020-5902CRITICALsob ataqueransomware11 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 10
CVE-2020-5902
CVE-2020-5902CRITICALsob ataqueransomware11 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
Exploit-DB
Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution
CVE-2020-7115—remotelinux10 jul 2020
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon succ
35RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-5902CRITICALsob ataqueransomware10 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2020-8193MEDIUMsob ataque10 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
GitHub PoC★ 88
Citrix ADC Vulns
CVE-2020-8193MEDIUMsob ataque10 jul 2020
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14
100RISCO
abrir ↗
GitHub PoC★ 62
F5 BIG-IP RCE CVE-2020-5902 automatic check tool
CVE-2020-5902CRITICALsob ataqueransomware10 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 5
Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface (TMUI) arbitrary file read and command execution vulnerabilities.
CVE-2020-5902CRITICALsob ataqueransomware10 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 2
批量检测CVE-2020-5902
CVE-2020-5902CRITICALsob ataqueransomware10 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 2
Script para validar CVE-2020-5902 hecho en Go.
CVE-2020-5902CRITICALsob ataqueransomware09 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
Exploit-DB
CompleteFTP Professional 12.1.3 - Remote Code Execution
CVE-2019-16116—remotewindows09 jul 2020
EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file.
23RISCO
abrir ↗
GitHub PoC
SharpHack/CVE-2019-19781
CVE-2019-19781CRITICALsob ataqueransomware09 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC
修改的poc,适用于python3
CVE-2019-19781CRITICALsob ataqueransomware09 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
GitHub PoC★ 1
Shu1L/CVE-2020-5902-fofa-scan
CVE-2020-5902CRITICALsob ataqueransomware09 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC
Simple Vulnerability Checker Wrote by me "@TheCyberViking" and A fellow Researcher who wanted to be left Nameless... you know who you are you beautiful bitch
CVE-2020-5902CRITICALsob ataqueransomware09 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
GitHub PoC★ 4
F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer.
CVE-2020-5902CRITICALsob ataqueransomware09 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-19781CRITICALsob ataqueransomware09 jul 2020
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2020-5902CRITICALsob ataqueransomware08 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
Exploit-DB
BSA Radar 1.6.7234.24750 - Cross-Site Request Forgery (Change Password)
CVE-2020-14944—webappshardware08 jul 2020
Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can all
23RISCO
abrir ↗
GitHub PoC★ 1
A powershell script to check vulnerability CVE-2020-5902 of ip list
CVE-2020-5902CRITICALsob ataqueransomware08 jul 2020
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir ↗
← anteriorpágina 846 / 2.820próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.