Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit300

Diagnostics Agent in Solution Manager, stores unencrypted credentials for Solution Manager server

CVE-2019-0307—

Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as So

18RISCO

abrir ↗

Metasploit300

Bypass the macOS TCC Framework

CVE-2020-9934MEDIUMsob ataque

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue

78RISCO

abrir ↗

Metasploit300

Novell Groupwise Agents HTTP Directory Traversal

CVE-2012-0419—

Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 be

30RISCO

abrir ↗

Metasploit300

Windows Pulse Secure Connect Client Saved Password Extractor

CVE-2020-8956LOW

Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settin

23RISCO

abrir ↗

Metasploit300

Windows Gather TeamViewer Passwords

CVE-2019-18988HIGHsob ataque

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for dif

86RISCO

abrir ↗

Metasploit300

Embedthis GoAhead Embedded Web Server Directory Traversal

CVE-2014-9707—

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remot

23RISCO

abrir ↗

Metasploit300

GlassFish Brute Force Utility

CVE-2011-0807—

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Applicati

50RISCO

abrir ↗

Metasploit300

Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database

CVE-2017-5146—

An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Vers

18RISCO

abrir ↗

Metasploit300

FortiMail Unauthenticated Login Bypass Scanner

CVE-2020-9294—

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 an

40RISCO

abrir ↗

Metasploit300

Cambium ePMP 1000 Account Password Reset

CVE-2017-5254—

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the

30RISCO

abrir ↗

Metasploit300

Windows Gather Forensics Duqu Registry Check

CVE-2011-3402HIGHsob ataque

Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Wind

88RISCO

abrir ↗

Metasploit300

FannyBMP or DementiaWheel Detection Registry Check

CVE-2010-2568HIGHsob ataque

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 all

100RISCO

abrir ↗

Metasploit300

LiteSpeed Source Code Disclosure/Download

CVE-2010-2333—

LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scrip

50RISCO

abrir ↗

Metasploit300

Linksys E1500 Directory Traversal Vulnerability

CVE-2013-10062MEDIUM

Linksys Routers apply.cgi Path Traversal

28RISCO

abrir ↗

Metasploit300

Linknat Vos Manager Traversal

CVE-2025-34118HIGH

Linknat VOS Manager Path Traversal File Disclosure

36RISCO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2298—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext info

23RISCO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2296—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag

50RISCO

abrir ↗

Metasploit300

Cambium ePMP 1000 'ping' Command Injection (up to v2.5)

CVE-2017-5255—

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web

60RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1122—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U

60RISCO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2021-37343—

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

23RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHsob ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RISCO

abrir ↗

Metasploit300

Netgear SPH200D Directory Traversal Vulnerability

CVE-2013-10063MEDIUM

Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

28RISCO

abrir ↗

Metasploit300

Joomla Bruteforce Login Utility

CVE-1999-0502—

A Unix account has a default, null, blank, or missing password.

50RISCO

abrir ↗

Metasploit300

Jenkins-CI Unauthenticated Script-Console Scanner

CVE-2015-8103—

The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co

60RISCO

abrir ↗

Metasploit300

JBoss Vulnerability Scanner

CVE-2010-0738MEDIUMsob ataqueransomware

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.