Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.958exploits catalogados

36.206CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.460Referência 22.832GitHub PoC 14.991VulnCheck XDB 8.829Nuclei 4.357Metasploit 3.489✓ só verificadosrecentes populares risco

78.324 exploits

GitHub PoC★ 14

This small script helps to avoid using MetaSploit (msfconsole) during the Enterprise pentests and OSCP-like exams. Grep included function will help you to get only the important information.

CVE-2006-3392—04 dez 2020

Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote

60RISCO

Exploit-DB

Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)

CVE-2020-28977—webappsmultiple04 dez 2020

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a

28RISCO

Exploit-DB

Wordpress Plugin Canto 1.3.0 - Blind SSRF (Unauthenticated)

CVE-2020-28978—webappsmultiple04 dez 2020

The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a

28RISCO

GitHub PoC

diegojuan/CVE-2019-15107

CVE-2019-15107CRITICALsob ataqueransomware03 dez 2020

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

GitHub PoC★ 1

Scan through given ip list

CVE-2019-0708CRITICALsob ataqueransomware03 dez 2020

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

VulnCheck XDB

initial-access

CVE-2019-15107CRITICALsob ataqueransomware03 dez 2020

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

GitHub PoC

ActorExpose/CVE-2017-11882

CVE-2017-11882HIGHsob ataqueransomware03 dez 2020

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi

100RISCO

Exploit-DB

WonderCMS 3.1.3 - Authenticated Remote Code Execution

CVE-2020-35314—webappsphp02 dez 2020

A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, al

28RISCO

Exploit-DB

Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile

CVE-2020-28687—webappsmultiple02 dez 2020

The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upl

28RISCO

Exploit-DB

WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution

CVE-2020-35313—webappsphp02 dez 2020

A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in Wonder

35RISCO

Exploit-DB

WordPress Plugin Wp-FileManager 6.8 - RCE

CVE-2020-25213CRITICALsob ataquewebappsphp02 dez 2020

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra

100RISCO

Exploit-DB

Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality

CVE-2020-27423—webappsphp02 dez 2020

Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial o

23RISCO

Exploit-DB

Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover

CVE-2020-27422—webappsphp02 dez 2020

In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an a

23RISCO

Exploit-DB

Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork

CVE-2020-28688—webappsmultiple02 dez 2020

The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to uplo

28RISCO

Exploit-DB

PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS

CVE-2020-14073—webappswindows02 dez 2020

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can c

23RISCO

Metasploit300

KOFFEE - Kia OFFensivE Exploit

CVE-2020-8539—02 dez 2020

Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an atta

18RISCO

VulnCheck XDB

local

CVE-2015-3636—01 dez 2020

The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data str

23RISCO

VulnCheck XDB

infoleak

CVE-2020-3992CRITICALsob ataqueransomware01 dez 2020

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-

100RISCO

VulnCheck XDB

local

CVE-2020-27950MEDIUMsob ataque01 dez 2020

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

68RISCO

VulnCheck XDB

infoleak

CVE-2019-5544CRITICALsob ataqueransomware01 dez 2020

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of

100RISCO

GitHub PoC★ 49

Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

CVE-2019-5544CRITICALsob ataqueransomware01 dez 2020

OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of

100RISCO

GitHub PoC★ 34

CVE-2020-27950 exploit

CVE-2020-27950MEDIUMsob ataque01 dez 2020

A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch

68RISCO

Exploit-DB

Wordpress Plugin EventON Calendar 3.0.5 - Reflected Cross-Site Scripting

CVE-2020-29395—webappsphp01 dez 2020

The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

43RISCO

Exploit-DB

Joomla! Component GMapFP 3.5 - Unauthenticated Arbitrary File Upload

CVE-2020-23972—webappsphp01 dez 2020

In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authenticating

50RISCO

GitHub PoC★ 49

Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

CVE-2020-3992CRITICALsob ataqueransomware01 dez 2020

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-

100RISCO

GitHub PoC★ 1

wikiZ/cve-2014-4113

CVE-2014-4113HIGHsob ataque30 nov 2020

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RISCO

Exploit-DB

Rejetto HttpFileServer 2.3.x - Remote Command Execution (3)

CVE-2014-6287CRITICALsob ataquewebappswindows30 nov 2020

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a

100RISCO

VulnCheck XDB

initial-access

CVE-2018-13379CRITICALsob ataqueransomware30 nov 2020

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.

100RISCO

VulnCheck XDB

initial-access

CVE-2020-11651CRITICALsob ataque30 nov 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

VulnCheck XDB

initial-access

CVE-2020-11652MEDIUMsob ataque30 nov 2020

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla

100RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.