Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.114exploits catalogados

31.649CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.810GitHub PoC 13.116VulnCheck XDB 8.069Nuclei 4.188Metasploit 3.462✓ só verificadosrecentes populares risco

19.810 exploits

Referência

CVE-2014-5005

CVE-2014-5005—

Directory traversal vulnerability in ZOHO ManageEngine Desktop Central (DC) before 9 build 90055 allows remote attackers

60RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência

CVE-2020-8816

CVE-2020-8816CRITICALsob ataque

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static l

100RISCO

abrir ↗

Referência

CVE-2017-1000117

CVE-2017-1000117—

A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca

60RISCO

abrir ↗

Referência

CVE-2019-12840

CVE-2019-12840—

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RISCO

abrir ↗

Referência

Webmin 1.910 - 'Package Updates' Remote Command Execution (Metasploit)

CVE-2019-12840—

In Webmin through 1.910, any user authorized to the "Package Updates" module can execute arbitrary commands with root pr

60RISCO

abrir ↗

Referência

CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)

CVE-2008-2639—

Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows rem

60RISCO

abrir ↗

Referência

CVE-2022-24734

CVE-2022-24734HIGH

Remote code execution in mybb

78RISCO

abrir ↗

Referência

CVE-2022-24734

CVE-2022-24734HIGH

Remote code execution in mybb

78RISCO

abrir ↗

Referência

CVE-2020-13166

CVE-2020-13166—

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcod

60RISCO

abrir ↗

Referência

CVE-2015-2797

CVE-2015-2797—

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 502

60RISCO

abrir ↗

Referência

CVE-2015-2797

CVE-2015-2797—

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 502

60RISCO

abrir ↗

Referência

CVE-2020-8012

CVE-2020-8012—

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerabi

60RISCO

abrir ↗

Referência

CVE-2020-8012

CVE-2020-8012—

CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerabi

60RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2018-9059

CVE-2018-9059—

Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code

60RISCO

abrir ↗

Referência

CVE-2016-0709

CVE-2016-0709—

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3

60RISCO

abrir ↗

Referência

CVE-2016-0709

CVE-2016-0709—

Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3

60RISCO

abrir ↗

Referência

CVE-2016-1287

CVE-2016-1287—

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0

45RISCO

abrir ↗

Referência

CVE-2016-1287

CVE-2016-1287—

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0

45RISCO

abrir ↗

Referência

CVE-2016-10176

CVE-2016-10176—

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the w

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

CVE-2018-1000049

CVE-2018-1000049—

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner

60RISCO

abrir ↗

Referência

Comtrend VR-3033 - Command Injection

CVE-2020-10173—

Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabiliti

45RISCO

abrir ↗

Referência

CVE-2017-0290

CVE-2017-0290—

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve

45RISCO

abrir ↗

Referência

CVE-2016-0854

CVE-2016-0854—

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess

60RISCO

abrir ↗

Referência

CVE-2013-1080

CVE-2013-1080—

The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform a

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.