Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2015-4664

CVE-2015-4664—

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t

28RISCO

abrir ↗

Referência

CVE-2017-1000112

CVE-2017-1000112—

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE

43RISCO

abrir ↗

Referência

CVE-2016-4201

CVE-2016-4201—

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acro

28RISCO

abrir ↗

Referência

CVE-2015-9266

CVE-2015-9266CRITICAL

Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

85RISCO

abrir ↗

Referência

CVE-2015-9266

CVE-2015-9266CRITICAL

Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

85RISCO

abrir ↗

Referência

CVE-2024-7332

CVE-2024-7332CRITICAL

TOTOLINK CP450 Telnet Service product.ini hard-coded password

68RISCO

abrir ↗

Referência

CVE-2010-1305

CVE-2010-1305—

Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot

43RISCO

abrir ↗

Referência

CVE-2010-1305

CVE-2010-1305—

Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly ot

43RISCO

abrir ↗

Referência

CVE-2018-13417

CVE-2018-13417—

In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E

28RISCO

abrir ↗

Referência

CVE-2022-40032

CVE-2022-40032CRITICAL

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' paramet

68RISCO

abrir ↗

Referência

CVE-2010-2321

CVE-2010-2321—

Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted

28RISCO

abrir ↗

Referência

CVE-2019-0186

CVE-2019-0186—

The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS

28RISCO

abrir ↗

Referência

CVE-2019-0186

CVE-2019-0186—

The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XS

28RISCO

abrir ↗

Referência

CVE-2014-9734

CVE-2014-9734—

Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att

28RISCO

abrir ↗

Referência

CVE-2014-9734

CVE-2014-9734—

Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote att

28RISCO

abrir ↗

Referência

CVE-2016-3309

CVE-2016-3309HIGHsob ataqueransomware

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;

76RISCO

abrir ↗

Referência

CVE-2016-0984

CVE-2016-0984HIGHsob ataque

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and

83RISCO

abrir ↗

Referência

CVE-2016-1002

CVE-2016-1002—

Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577

28RISCO

abrir ↗

Referência

CVE-2015-6018

CVE-2015-6018—

The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attac

28RISCO

abrir ↗

Referência

CVE-2016-0964

CVE-2016-0964—

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RISCO

abrir ↗

Referência

CVE-2016-0965

CVE-2016-0965—

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RISCO

abrir ↗

Referência

CVE-2016-0967

CVE-2016-0967—

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on

28RISCO

abrir ↗

Referência

WinFTP Server 2.3.0 - 'PASV Mode' Remote Denial of Service

CVE-2008-5666—

WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of se

43RISCO

abrir ↗

Referência

CVE-2019-9017

CVE-2019-9017—

DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m

28RISCO

abrir ↗

Referência

CVE-2019-9017

CVE-2019-9017—

DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the m

28RISCO

abrir ↗

Referência

CVE-2019-14312

CVE-2019-14312—

Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This v

43RISCO

abrir ↗

Referência

CVE-2016-0951

CVE-2016-0951—

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISCO

abrir ↗

Referência

CVE-2016-0952

CVE-2016-0952—

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISCO

abrir ↗

Referência

CVE-2016-0953

CVE-2016-0953—

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to exec

28RISCO

abrir ↗

Referência

CVE-2018-8120

CVE-2018-8120HIGHsob ataqueransomware

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.