Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2025-14706

CVE-2025-14706CRITICAL

Shiguangwu sgwbox N3 NETREBOOT http_eshell_server command injection

53RISCO

abrir ↗

Referência

CVE-2025-14707

CVE-2025-14707CRITICAL

Shiguangwu sgwbox N3 DOCKER Feature http_eshell_server command injection

53RISCO

abrir ↗

Referência

CVE-2017-8051

CVE-2017-8051—

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.

28RISCO

abrir ↗

Referência

CVE-2014-2595

CVE-2014-2595—

Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a perm

28RISCO

abrir ↗

Referência

Barracuda Web Application Firewall - Authentication Bypass

CVE-2014-2595—

Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a perm

28RISCO

abrir ↗

Referência

CVE-2018-18761

CVE-2018-18761—

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

28RISCO

abrir ↗

Referência

CVE-2015-1815

CVE-2015-1815—

The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to ex

28RISCO

abrir ↗

Referência

CVE-2018-1418

CVE-2018-1418—

IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IBM

50RISCO

abrir ↗

Referência

CVE-2021-25161

CVE-2021-25161—

A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in ve

43RISCO

abrir ↗

Referência

CVE-2013-2572

CVE-2013-2572—

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 d

28RISCO

abrir ↗

Referência

CVE-2013-2572

CVE-2013-2572—

A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 d

28RISCO

abrir ↗

Referência

CVE-2018-11220

CVE-2018-11220—

Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.

28RISCO

abrir ↗

Referência

CVE-2010-4931

CVE-2010-4931—

Directory traversal vulnerability in maincore.php in PHP-Fusion allows remote attackers to include and execute arbitrary

28RISCO

abrir ↗

Referência

CVE-2016-4136

CVE-2016-4136—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência

CVE-2016-4137

CVE-2016-4137—

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsof

28RISCO

abrir ↗

Referência

Microsoft Visual Studio 6.0 - 'VBTOVSI.dll 1.0.0.0' File Overwrite

CVE-2007-4890—

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1

28RISCO

abrir ↗

Referência

CVE-2010-0943

CVE-2010-0943—

Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2010-0943

CVE-2010-0943—

Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2018-11412

CVE-2018-11412—

In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untruste

28RISCO

abrir ↗

Referência

HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities

CVE-2007-6506—

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlie

28RISCO

abrir ↗

Referência

CVE-2017-7455

CVE-2017-7455—

Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

28RISCO

abrir ↗

Referência

CVE-2017-7455

CVE-2017-7455—

Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

28RISCO

abrir ↗

Referência

CVE-2010-1532

CVE-2010-1532—

Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-1532

CVE-2010-1532—

Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2015-5065

CVE-2015-5065—

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic

28RISCO

abrir ↗

Referência

CVE-2015-5065

CVE-2015-5065—

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic

28RISCO

abrir ↗

Referência

CVE-2018-0834

CVE-2018-0834—

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remot

35RISCO

abrir ↗

Referência

WonderWare SuiteLink 2.0 - Remote Denial of Service (Metasploit)

CVE-2008-2005—

The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, a

28RISCO

abrir ↗

Referência

CVE-2010-3142

CVE-2010-3142—

Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attacker

28RISCO

abrir ↗

Referência

CVE-2018-14485

CVE-2018-14485—

BlogEngine.NET 3.3 allows XXE attacks via the POST body to metaweblog.axd.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.