Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados

32.153CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.978GitHub PoC 13.282VulnCheck XDB 8.176Nuclei 4.202Metasploit 3.462✓ só verificadosrecentes populares risco

19.978 exploits

Referência

CVE-2021-43062

CVE-2021-43062MEDIUM

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0

53RISCO

abrir ↗

Referência

CVE-2017-5799

CVE-2017-5799—

A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found. The vulnerability impacts OCMP ve

28RISCO

abrir ↗

Referência

CVE-2018-1821

CVE-2018-1821HIGH

IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) a

46RISCO

abrir ↗

Referência

CVE-2010-2033

CVE-2010-2033—

Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Jooml

43RISCO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2010-4719

CVE-2010-4719—

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to r

43RISCO

abrir ↗

Referência

CVE-2016-7866

CVE-2016-7866—

Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitatio

28RISCO

abrir ↗

Referência

CVE-2016-7866

CVE-2016-7866—

Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitatio

28RISCO

abrir ↗

Referência

CVE-2017-3549

CVE-2017-3549—

Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Sup

28RISCO

abrir ↗

Referência

CVE-2018-8719

CVE-2018-8719—

An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securit

43RISCO

abrir ↗

Referência

CVE-2025-4978

CVE-2025-4978CRITICAL

Netgear DGND3700 Basic Authentication BRS_top.html improper authentication

53RISCO

abrir ↗

Referência

CVE-2010-2035

CVE-2010-2035—

Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2017-6190

CVE-2017-6190—

Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows

28RISCO

abrir ↗

Referência

CVE-2015-3623

CVE-2015-3623—

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server

28RISCO

abrir ↗

Referência

CVE-2015-3623

CVE-2015-3623—

XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server

28RISCO

abrir ↗

Referência

CVE-2022-34046

CVE-2022-34046—

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via vie

43RISCO

abrir ↗

Referência

CVE-2021-43136

CVE-2021-43136—

An authentication bypass issue in FormaLMS <= 2.4.4 allows an attacker to bypass the authentication mechanism and obtain

28RISCO

abrir ↗

Referência

CVE-2010-1306

CVE-2010-1306—

Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at

43RISCO

abrir ↗

Referência

CVE-2010-1306

CVE-2010-1306—

Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote at

43RISCO

abrir ↗

Referência

CVE-2010-1875

CVE-2010-1875—

Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows re

43RISCO

abrir ↗

Referência

Microsoft Windows - GDI+ '.ICO' Remote Division By Zero

CVE-2008-4327—

gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attacke

28RISCO

abrir ↗

Referência

CVE-2010-2351

CVE-2010-2351—

Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remo

28RISCO

abrir ↗

Referência

CVE-2019-15039

CVE-2019-15039—

An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in

28RISCO

abrir ↗

Referência

CVE-2021-46379

CVE-2021-46379—

DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrust

43RISCO

abrir ↗

Referência

CVE-2019-3924

CVE-2019-3924—

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The so

28RISCO

abrir ↗

Referência

CVE-2010-1602

CVE-2010-1602—

Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack

43RISCO

abrir ↗

Referência

CVE-2010-1602

CVE-2010-1602—

Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attack

43RISCO

abrir ↗

Referência

Ruby 1.9 - regex engine Remote Socket Memory Leak

CVE-2008-3443—

The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, an

28RISCO

abrir ↗

Referência

CVE-2017-9414

CVE-2017-9414—

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta

28RISCO

abrir ↗

Referência

CVE-2017-9414

CVE-2017-9414—

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.