Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.114exploits catalogados

31.649CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.810GitHub PoC 13.116VulnCheck XDB 8.069Nuclei 4.188Metasploit 3.462✓ só verificadosrecentes populares risco

19.810 exploits

Referência

CVE-2017-16921

CVE-2017-16921—

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.2

28RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2019-1937

CVE-2019-1937CRITICAL

Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability

85RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2009-4140

CVE-2009-4140—

Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer

60RISCO

abrir ↗

Referência

CVE-2019-10267

CVE-2019-10267—

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to

60RISCO

abrir ↗

Referência

CVE-2019-10267

CVE-2019-10267—

An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to

60RISCO

abrir ↗

Referência

CVE-2017-1092

CVE-2017-1092—

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISCO

abrir ↗

Referência

CVE-2017-1092

CVE-2017-1092—

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a

60RISCO

abrir ↗

Referência

CVE-2016-6433

CVE-2016-6433—

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users

60RISCO

abrir ↗

Referência

CVE-2016-6433

CVE-2016-6433—

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users

60RISCO

abrir ↗

Referência

CVE-2016-6433

CVE-2016-6433—

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users

60RISCO

abrir ↗

Referência

CVE-2022-32429

CVE-2022-32429—

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technolog

60RISCO

abrir ↗

Referência

CVE-2022-2884

CVE-2022-2884CRITICAL

A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3

70RISCO

abrir ↗

Referência

CVE-2017-11357

CVE-2017-11357CRITICALsob ataqueransomware

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which a

100RISCO

abrir ↗

Referência

CVE-2022-23642

CVE-2022-23642HIGH

Code Injection in Sourcegraph

78RISCO

abrir ↗

Referência

CVE-2022-23642

CVE-2022-23642HIGH

Code Injection in Sourcegraph

78RISCO

abrir ↗

Referência

CVE-2013-3336

CVE-2013-3336—

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files

60RISCO

abrir ↗

Referência

CVE-2016-1561

CVE-2016-1561—

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, whic

60RISCO

abrir ↗

Referência

CVE-2020-11854

CVE-2020-11854CRITICAL

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

85RISCO

abrir ↗

Referência

CVE-2018-14667

CVE-2018-14667CRITICALsob ataque

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resou

100RISCO

abrir ↗

Referência

CVE-2015-6522

CVE-2015-6522—

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbi

60RISCO

abrir ↗

Referência

CVE-2018-15811

CVE-2018-15811HIGHsob ataque

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

100RISCO

abrir ↗

Referência

CVE-2018-18325

CVE-2018-18325HIGHsob ataque

DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue ex

100RISCO

abrir ↗

Referência

CVE-2017-5715

CVE-2017-5715MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl

55RISCO

abrir ↗

Referência

CVE-2017-5715

CVE-2017-5715MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl

55RISCO

abrir ↗

Referência

CVE-2017-5715

CVE-2017-5715MEDIUM

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized discl

55RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.