Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

3.462 exploits

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2298—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext info

23RISCO

abrir ↗

Metasploit300

Meteocontrol WEBlog Password Extractor

CVE-2016-2296—

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pag

50RISCO

abrir ↗

Metasploit300

DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)

CVE-2017-7924—

An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L

23RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1535—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-

60RISCO

abrir ↗

Metasploit300

Samba read_nttrans_ea_list Integer Overflow

CVE-2013-4124—

Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.

50RISCO

abrir ↗

Metasploit300

Samba lsa_io_trans_names Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

Samba lsa_io_privilege_set Heap Overflow

CVE-2007-2446—

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers

60RISCO

abrir ↗

Metasploit300

RPC DoS targeting *nix rpcbind/libtirpc

CVE-2017-8779—

rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider t

60RISCO

abrir ↗

Metasploit300

MS09-020 IIS6 WebDAV Unicode Authentication Bypass

CVE-2009-1122—

The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode U

60RISCO

abrir ↗

Metasploit300

Memcached Remote Denial of Service

CVE-2011-4971—

Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin

23RISCO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Metasploit300

ws - Denial of Service

CVE-2016-10542—

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date

18RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2021-37343—

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post au

23RISCO

abrir ↗

Metasploit300

WordPress Traversal Directory DoS

CVE-2016-6897—

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.

43RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2019-15949HIGHsob ataque

Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios

100RISCO

abrir ↗

Metasploit300

ua-parser-js npm module ReDoS

CVE-2017-16086—

ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial o

18RISCO

abrir ↗

Metasploit300

Tautulli v2.1.9 - Shutdown Denial of Service

CVE-2019-19833—

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous a

23RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5792—

Improper neutralization of argument delimiters in a command in Nagios XI 5.7.3 allows a remote, authenticated admin user

30RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-5791—

Improper neutralization of special elements used in an OS command in Nagios XI 5.7.3 allows a remote, authenticated admi

60RISCO

abrir ↗

Metasploit300

Nagios XI Scanner

CVE-2020-35578—

An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion feature

60RISCO

abrir ↗

Metasploit300

Netgear SPH200D Directory Traversal Vulnerability

CVE-2013-10063MEDIUM

Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET

28RISCO

abrir ↗

Metasploit300

Nginx Source Code Disclosure/Download

CVE-2010-2263—

nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or

60RISCO

abrir ↗

Metasploit300

Novell Zenworks Mobile Device Management Admin Credentials

CVE-2013-1081—

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote at

50RISCO

abrir ↗

Metasploit300

MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service

CVE-2015-1635CRITICALsob ataque

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3498—

IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when sessi

23RISCO

abrir ↗

Metasploit300

HTTP Options Detection

CVE-2005-3398—

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the

23RISCO

abrir ↗

Metasploit300

Ruby on Rails JSON Processor YAML Deserialization Scanner

CVE-2013-0333—

lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly

60RISCO

abrir ↗

Metasploit300

Ruby on Rails XML Processor YAML Deserialization Scanner

CVE-2013-0156—

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an

60RISCO

abrir ↗

Metasploit300

Apache Reverse Proxy Bypass Vulnerability Scanner

CVE-2011-3368—

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does

60RISCO

abrir ↗

Metasploit300

RIPS Scanner Directory Traversal

CVE-2025-34126HIGH

RIPS Scanner v0.54 Path Traversal

36RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.