Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
78.794exploits catalogados
36.057CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.459Referência 22.721GitHub PoC 14.946VulnCheck XDB 8.829Nuclei 4.350Metasploit 3.489✓ só verificadosrecentespopularesrisco
24.459 exploits
Exploit-DB
ASUS ASMB8 iKVM 1.14.51 - Remote Code Execution (RCE)
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create exten
28RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 - Cross-Site Request Forgery (CSRF)
Cross Side Request Forgery, CSRF
41RISCO
abrir ↗Exploit-DB
Ruckus IoT Controller 1.7.1.0 - Undocumented Backdoor Account
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowin
28RISCO
abrir ↗Exploit-DB
phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames
phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames
33RISCO
abrir ↗Exploit-DB
Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
41RISCO
abrir ↗Exploit-DB
WebMethods Integration Server 10.15.0.0000-0092 - Improper Access on Login Page
The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core
41RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy
Weak Password Rules/Strength
48RISCO
abrir ↗Exploit-DB
Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗Exploit-DB
IBMi Navigator 7.5 - Server Side Request Forgery (SSRF)
IBM i server-side request forgery
33RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (escDevicesUpdate.php) - Denial of Service (DOS)
Denial of Service, DoS
41RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISCO
abrir ↗Exploit-DB
Really Simple Security 9.1.1.1 - Authentication Bypass
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
85RISCO
abrir ↗Exploit-DB
Spring Boot common-user-management 0.1 - Remote Code Execution (RCE)
common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE)
41RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Remote Code Execution, RCE
48RISCO
abrir ↗Exploit-DB
Pymatgen 2024.1 - Remote Code Execution (RCE)
pymatgen arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution
Remote Code Execution, RCE
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting
Cross Site Scripting XSS
48RISCO
abrir ↗Exploit-DB
OpenCMS 17.0 - Stored Cross Site Scripting (XSS)
XWiki Platform XSS through conflict resolution
48RISCO
abrir ↗Exploit-DB
Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated)
Cacti RCE vulnerability when importing packages
85RISCO
abrir ↗Exploit-DB
Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE)
A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to res
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Data Validation / Sanitization
48RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure
Credentails Disclosure
41RISCO
abrir ↗Exploit-DB
ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution
Cross Site Scripting XSS
48RISCO
abrir ↗Exploit-DB
GestioIP 3.5.7 - Cross-Site Scripting (XSS)
The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and en
48RISCO
abrir ↗Exploit-DB
SilverStripe 5.3.8 - Stored Cross Site Scripting (XSS) (Authenticated)
Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin
33RISCO
abrir ↗Exploit-DB
GestioIP 3.5.7 - Reflected Cross-Site Scripting (Reflected XSS)
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly forma
33RISCO
abrir ↗Exploit-DB
GestioIP 3.5.7 - Stored Cross-Site Scripting (Stored XSS)
The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious cod
33RISCO
abrir ↗Exploit-DB
GestioIP 3.5.7 - Remote Command Execution (RCE)
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacke
75RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.