Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.647exploits catalogados

34.986CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.899GitHub PoC 14.014VulnCheck XDB 8.571Nuclei 4.248Metasploit 3.472✓ só verificadosrecentes populares risco

14.014 exploits

GitHub PoC★ 28

patches for SNYK-JS-JQUERY-174006, CVE-2019-11358, CVE-2019-5428

CVE-2019-11358—30 mar 2019

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) becaus

45RISCO

abrir ↗

GitHub PoC★ 3

IBM Lotus Domino <= R8 Password Hash Extraction Exploit

CVE-2005-2428—29 mar 2019

Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hid

60RISCO

abrir ↗

GitHub PoC★ 23

ASUS SmartHome Exploit for CVE-2019-11061 and CVE-2019-11063

CVE-2019-11061CRITICAL29 mar 2019

HG100 has a broken access control vulnerability in its Web API Server

48RISCO

abrir ↗

GitHub PoC

stillan00b/CVE-2019-5736

CVE-2019-5736—27 mar 2019

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc b

60RISCO

abrir ↗

GitHub PoC

cve-2016-9838

CVE-2016-9838—27 mar 2019

An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of

28RISCO

abrir ↗

GitHub PoC

cve-2019-5420

CVE-2019-5420—27 mar 2019

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISCO

abrir ↗

GitHub PoC★ 8

CVE-2019-9978 - RCE on a Wordpress plugin: Social Warfare < 3.5.3

CVE-2019-9978MEDIUMsob ataque25 mar 2019

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio

100RISCO

abrir ↗

GitHub PoC★ 47

cve-2019-0808-poc

CVE-2019-0808HIGHsob ataque25 mar 2019

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

98RISCO

abrir ↗

GitHub PoC★ 67

Array.prototype.slice wrong alias information.

CVE-2019-9810—25 mar 2019

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check

28RISCO

abrir ↗

GitHub PoC★ 1

CVE-2018-7600

CVE-2018-7600CRITICALsob ataqueransomware24 mar 2019

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

abrir ↗

GitHub PoC★ 129

CVE-2019-0604

CVE-2019-0604CRITICALsob ataqueransomware23 mar 2019

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup

100RISCO

abrir ↗

GitHub PoC★ 133

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

CVE-2019-5418HIGHsob ataque23 mar 2019

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

GitHub PoC

PoC Scan. (cve-2011-3368)

CVE-2011-3368—22 mar 2019

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does

60RISCO

abrir ↗

GitHub PoC

CVE-2017-5638 (PoC Exploits)

CVE-2017-5638CRITICALsob ataqueransomware22 mar 2019

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

abrir ↗

GitHub PoC★ 8

CVE-2019-5420 (Ruby on Rails)

CVE-2019-5420—21 mar 2019

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess th

60RISCO

abrir ↗

GitHub PoC★ 6

CVE-2018-11686 - FlexPaper PHP Publish Service RCE <= 2.3.6

CVE-2018-11686—20 mar 2019

The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_c

50RISCO

abrir ↗

GitHub PoC★ 14

GUI版 EXP

CVE-2018-1335—20 mar 2019

From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to

60RISCO

abrir ↗

GitHub PoC★ 254

FileReader Exploit

CVE-2019-5786MEDIUMsob ataque20 mar 2019

Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform

90RISCO

abrir ↗

GitHub PoC★ 4

POC for CVE-2017-10271. Since java.lang.ProcessBuilder was the original vector for RCE, there are multiple signature based rules that block this particular payload. Added java.lang.Runtime and will add others in the future. This is for educational purposes only: I take no responsibility for how you use this code.

CVE-2017-10271HIGHsob ataqueransomware20 mar 2019

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISCO

abrir ↗

GitHub PoC

Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250

CVE-2018-20250HIGHsob ataqueransomware19 mar 2019

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field o

100RISCO

abrir ↗

GitHub PoC★ 36

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

CVE-2019-5418HIGHsob ataque19 mar 2019

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

GitHub PoC★ 5

File Content Disclosure on Rails Test Case - CVE-2019-5418

CVE-2019-5418HIGHsob ataque18 mar 2019

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

GitHub PoC★ 7

xConsoIe/CVE-2019-0193

CVE-2019-0193HIGHsob ataque18 mar 2019

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources,

100RISCO

abrir ↗

GitHub PoC★ 6

thinkphp5.*Rce CVE-2018-20062

CVE-2018-20062CRITICALsob ataque17 mar 2019

An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP

100RISCO

abrir ↗

GitHub PoC★ 201

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

CVE-2019-5418HIGHsob ataque16 mar 2019

There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where spe

100RISCO

abrir ↗

GitHub PoC

cve-2018-16283

CVE-2018-16283—15 mar 2019

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

50RISCO

abrir ↗

GitHub PoC

cve-2019-9194

CVE-2019-9194—15 mar 2019

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector.

60RISCO

abrir ↗

GitHub PoC

cve-2019-9184

CVE-2019-9184—15 mar 2019

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitr

23RISCO

abrir ↗

GitHub PoC★ 10

Noodle [Moodle RCE] (v3.4.1) - CVE-2018-1133

CVE-2018-1133—15 mar 2019

An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code exec

35RISCO

abrir ↗

GitHub PoC★ 1

原创作者：Bearcat@secfree.com

CVE-2017-10271HIGHsob ataqueransomware15 mar 2019

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.