Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
84.600exploits catalogados
39.734CVEs com exploração pública
24.695testados em laboratório
TodosReferência 25.742Exploit-DB 24.486GitHub PoC 16.618VulnCheck XDB 9.736Nuclei 4.493Metasploit 3.525✓ só verificadosrecentespopularesrisco
84.600 exploits
Metasploit600
Pandora FMS Events Remote Command Execution
Artica Pandora FMS 7.44 allows remote command execution via the events feature.
40RISCO
abrir ↗Exploit-DB
D-Link DIR-615 T1 20.10 - CAPTCHA Bypass
The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and
23RISCO
abrir ↗GitHub PoC★ 2
Data Collection Related to Exim CVE-2019-10149
A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(
100RISCO
abrir ↗GitHub PoC★ 5
ynots0ups/CVE-2019-16113
Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .j
60RISCO
abrir ↗Metasploit300
Cisco 7937G SSH Privilege Escalation
A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to re
23RISCO
abrir ↗Metasploit300
Cisco 7937G Denial-of-Service Reboot Attack
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the de
40RISCO
abrir ↗GitHub PoC
CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗Metasploit300
Cisco 7937G Denial-of-Service Attack
A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remot
23RISCO
abrir ↗Exploit-DB
Microsoft Windows - 'SMBGhost' Remote Code Execution
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗Exploit-DB
OpenCart 3.0.3.2 - Stored Cross Site Scripting (Authenticated)
OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upl
23RISCO
abrir ↗GitHub PoC
CVE-2020-0796-exp
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗Exploit-DB
vCloud Director 9.7.0.15498291 - Remote Code Execution
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4
28RISCO
abrir ↗VulnCheck XDB
initial-access
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗GitHub PoC★ 6
Exploit for CVE-2020-9283 based on Go
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the
28RISCO
abrir ↗Exploit-DB
VMware vCenter Server 6.7 - Authentication Bypass
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Servi
100RISCO
abrir ↗Metasploit300
Directory Traversal in Spring Cloud Config Server
Directory Traversal with spring-cloud-config-server
100RISCO
abrir ↗Metasploit300
Cisco DCNM auth bypass
Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
85RISCO
abrir ↗GitHub PoC★ 89
PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4
28RISCO
abrir ↗Exploit-DB
QuickBox Pro 2.1.8 - Authenticated Remote Code Execution
QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execut
28RISCO
abrir ↗Exploit-DB
WordPress Plugin BBPress 2.5 - Unauthenticated Privilege Escalation
An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Regi
35RISCO
abrir ↗GitHub PoC★ 3
nmurilo/CVE-2008-4687-exploit
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort param
50RISCO
abrir ↗VulnCheck XDB
initial-access
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RISCO
abrir ↗GitHub PoC★ 5
The reproduction code for CVE-2019-8641.
An out-of-bounds read was addressed with improved input validation.
28RISCO
abrir ↗VulnCheck XDB
initial-access
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗GitHub PoC
yukar1z0e/CVE-2017-15944
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote
100RISCO
abrir ↗GitHub PoC★ 2
This project for CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.