Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

85.682exploits catalogados

39.953CVEs com exploração pública

24.696testados em laboratório

Todos Referência 25.887Exploit-DB 24.488GitHub PoC 17.378VulnCheck XDB 9.888Nuclei 4.513Metasploit 3.528✓ só verificadosrecentes populares risco

85.682 exploits

VulnCheck XDB

client-side

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2016-0638—15 jan 2020

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, an

35RISCO

abrir ↗

GitHub PoC★ 35

Zeek package to detect CVE-2020-0601

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

VulnCheck XDB

remote-with-credentials

CVE-2019-2618—15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

35RISCO

abrir ↗

GitHub PoC★ 336

A PoC for CVE-2020-0601

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 2.080

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

CVE-2018-2628CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2893—15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

60RISCO

abrir ↗

GitHub PoC★ 5

Zeek package that uses OpenSSL to detect CVE-2020-0601 exploit attempts

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

GitHub PoC★ 1

A Windows Crypto Exploit

CVE-2020-0601HIGHsob ataque15 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

GitHub PoC★ 2.080

CVE-2017-3248—15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Suppo

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-14750CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

GitHub PoC★ 3

Automated forensic script hunting for cve-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Metasploit300

WebLogic Server Deserialization RCE - BadAttributeValueExpException

CVE-2020-2555CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su

100RISCO

abrir ↗

GitHub PoC★ 2.071

CVE-2020-2551CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-2883CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions th

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2019-2725HIGHsob ataqueransomware15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

GitHub PoC

IOCs for CVE-2019-19781

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

GitHub PoC

Check your website for CVE-2019-19781 Vulnerable

CVE-2019-19781CRITICALsob ataqueransomware15 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-10271HIGHsob ataqueransomware15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-2551CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Suppor

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-2555CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Su

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2894—15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Su

50RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2020-14882CRITICALsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2017-3506HIGHsob ataque15 jan 2020

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte

100RISCO

abrir ↗

Metasploit0

WordPress InfiniteWP Client Authentication Bypass

CVE-2020-8772—14 jan 2020

The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in in

40RISCO

abrir ↗

GitHub PoC★ 2

Remote Code Execution Exploit

CVE-2020-0601HIGHsob ataque14 jan 2020

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) c

93RISCO

abrir ↗

Exploit-DB✓ VexDay Proof

Android - ashmem Readonly Bypasses via remap_file_pages() and ASHMEM_UNPIN

CVE-2020-0009—dosandroid14 jan 2020

In calc_vm_may_flags of ashmem.c, there is a possible arbitrary write to shared memory due to a permissions bypass. This

23RISCO

abrir ↗

Exploit-DB

Digi AnywhereUSB 14 - Reflective Cross-Site Scripting

CVE-2019-18859—webappsphp13 jan 2020

Digi AnywhereUSB 14 allows XSS via a link for the Digi Page.

23RISCO

abrir ↗

GitHub PoC★ 11

Automated script for Citrix ADC scanner (CVE-2019-19781) using hosts retrieved from Shodan API. You must have a Shodan account to use this script.

CVE-2019-19781CRITICALsob ataqueransomware13 jan 2020

An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. Th

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.