Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.313exploits catalogados

34.834CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentes populares risco

8.460 exploits

VulnCheck XDB

initial-access

CVE-2017-20149CRITICAL27 abr 2018

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chi

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware27 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware27 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2017-9506—25 abr 2018

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before

60RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque20 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware19 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque19 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-2628CRITICALsob ataque18 abr 2018

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). S

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware17 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7602CRITICALsob ataqueransomware17 abr 2018

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware16 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

info-leak

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware15 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware14 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware14 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware13 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-1273CRITICALsob ataqueransomware13 abr 2018

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware12 abr 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2017-8570HIGHsob ataque08 abr 2018

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic

93RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2018-4878HIGHsob ataqueransomware04 abr 2018

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware30 mar 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware30 mar 2018

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2017-8570HIGHsob ataque27 mar 2018

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic

93RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.