Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

86.186exploits catalogados

40.156CVEs com exploração pública

24.696testados em laboratório

Todos Referência 26.041Exploit-DB 24.488GitHub PoC 17.609VulnCheck XDB 9.976Nuclei 4.542Metasploit 3.530✓ só verificadosrecentes populares risco

86.186 exploits

GitHub PoC★ 1

exploit camera with vuln cve-2018-9995 ( Novo, CeNova, QSee, Pulnix, XVR 5 in 1 (title: "XVR Login"), Securus, - Security. Never Compromise !! - Night OWL, DVR Login, HVR Login, MDVR Login )

CVE-2018-9995—10 jan 2019

TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR L

60RISCO

Exploit-DB

BlogEngine 3.3 - XML External Entity Injection

CVE-2018-14485—webappswindows09 jan 2019

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RISCO

Exploit-DB

ZTE MF65 BD_HDV6MF65V1.0.0B05 - Cross-Site Scripting

CVE-2018-7355—webappshardware09 jan 2019

All versions up to V1.0.0B05 of ZTE MF65 and all versions up to V1.0.0B02 of ZTE MF65M1 are impacted by cross-site scrip

23RISCO

GitHub PoC

CVE-2009-4660 - BigAnt Server 2.52 'USV' Remote Buffer Overflow Vulnerability. Tested on Windows XP Professional SP3.

CVE-2009-4660—09 jan 2019

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to

50RISCO

Exploit-DB✓ VexDay Proof

Microsoft Windows - DSSVC CheckFilePermission Arbitrary File Deletion

CVE-2018-8584—localwindows09 jan 2019

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (A

23RISCO

Exploit-DB

Microsoft Office SharePoint Server 2016 - Denial of Service (Metasploit)

CVE-2018-8269—doswindows09 jan 2019

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Servic

28RISCO

GitHub PoC★ 681

ES File Explorer Open Port Vulnerability - CVE-2019-6447

CVE-2019-6447—09 jan 2019

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary fi

50RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2018-1000861CRITICALsob ataque08 jan 2019

A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea

100RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003005—08 jan 2019

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/

23RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003001—08 jan 2019

A sandbox bypass vulnerability exists in Pipeline: Groovy Plugin 2.61 and earlier in src/main/java/org/jenkinsci/plugins

60RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003000—08 jan 2019

A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/

60RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003029CRITICALsob ataque08 jan 2019

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/

100RISCO

Metasploit600

Jenkins ACL Bypass and Metaprogramming RCE

CVE-2019-1003002—08 jan 2019

A sandbox bypass vulnerability exists in Pipeline: Declarative Plugin 1.3.3 and earlier in pipeline-model-definition/src

60RISCO

GitHub PoC

poc for 0263

CVE-2017-0263HIGHsob ataque07 jan 2019

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012

76RISCO

Exploit-DB

Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal

CVE-2018-20526—webappsphp07 jan 2019

Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.

60RISCO

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque07 jan 2019

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

Exploit-DB

PLC Wireless Router GPN2.4P21-C-CN - Cross-Site Scripting

CVE-2018-20326—webappscgi07 jan 2019

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage

23RISCO

Exploit-DB

MyBB OUGC Awards Plugin 1.8.3 - Persistent Cross-Site Scripting

CVE-2019-3501—webappsphp07 jan 2019

The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards pag

23RISCO

Exploit-DB

Roxy Fileman 1.4.5 - Unrestricted File Upload / Directory Traversal

CVE-2018-20525—webappsphp07 jan 2019

Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.

28RISCO

Exploit-DB

LayerBB 1.1.1 - Persistent Cross-Site Scripting

CVE-2018-17997—webappsphp07 jan 2019

LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).

23RISCO

Exploit-DB

KioWare Server Version 4.9.6 - Weak Folder Permissions Privilege Escalation

CVE-2018-18435—localwindows07 jan 2019

KioWare Server version 4.9.6 and older installs by default to "C:\kioware_com" with weak folder permissions granting any

23RISCO

Exploit-DB

Ajera Timesheets 9.10.16 - Deserialization of Untrusted Data

CVE-2018-20221—webappswindows07 jan 2019

Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and prior are vulnerable to remote code execution via deserializ

28RISCO

Exploit-DB

Huawei E5330 21.210.09.00.158 - Cross-Site Request Forgery (Send SMS)

CVE-2014-5395—webappshardware07 jan 2019

Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13S

23RISCO

GitHub PoC★ 12

漏洞利用工具

CVE-2018-2628CRITICALsob ataque07 jan 2019

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

GitHub PoC★ 1

cve-2018-11776

CVE-2018-11776HIGHsob ataque06 jan 2019

Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN

100RISCO

GitHub PoC

cve-2016-7434

CVE-2016-7434—06 jan 2019

The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf

35RISCO

GitHub PoC

cve-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware06 jan 2019

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

GitHub PoC

cve-2015-8103

CVE-2015-8103—06 jan 2019

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

GitHub PoC

CVE-2018-6389 PoC node js multisite with proxy

CVE-2018-6389—06 jan 2019

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISCO

GitHub PoC

cve-2015-5602

CVE-2015-5602—06 jan 2019

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is d

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.