Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
71.836exploits catalogados
32.133CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentespopularesrisco
4.201 exploits
Nucleimedium
AvantFAX 3.3.3 - Cross-Site Scripting
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name con
18RISCO
abrir ↗Nucleicritical
Fastjson Insecure Deserialization - Remote Code Execution
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attac
30RISCO
abrir ↗Nucleicritical
Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution
ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that
100RISCO
abrir ↗Nucleimedium
AdPush < 1.44 - Cross-Site Scripting
The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting
The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting
The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting
The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Social Login by BestWebSoft < 0.2 - Cross-Site Scripting
The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting
The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
BestWebSoft's Twitter < 2.55 - Cross-Site Scripting
The twitter-plugin plugin before 2.55 for WordPress has XSS.
18RISCO
abrir ↗Nucleimedium
LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting
The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting
The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting
The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Rating by BestWebSoft < 0.2 - Cross-Site Scripting
The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting
The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
18RISCO
abrir ↗Nucleimedium
WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
18RISCO
abrir ↗Nucleicritical
Adning Advertising <= 1.5.5 - Arbitrary File Upload
Adning Advertising <= 1.5.5 - Arbitrary File Upload
43RISCO
abrir ↗Nucleicritical
WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
Epsilon Framework Themes (Various Versions) - Function Injection
75RISCO
abrir ↗Nucleicritical
ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
43RISCO
abrir ↗Nucleihigh
ListingPro < 2.6.1 - Sensitive Data Disclosure
ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Sensitive Information Disclosure
28RISCO
abrir ↗Nucleimedium
WordPress Plugin Adning Advertising < 1.5.6 - Arbitrary File Upload
Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal
28RISCO
abrir ↗Nucleihigh
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
36RISCO
abrir ↗Nucleihigh
WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
36RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.