Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2015-7944

CVE-2015-7944—

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11

28RISCO

abrir ↗

Referência

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

CVE-2008-5587—

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when register_globals is ena

43RISCO

abrir ↗

Referência

CVE-2008-6264

CVE-2008-6264—

SQL injection vulnerability in admin/admin.php in E-topbiz Slide Popups 1.0 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2023-32749

CVE-2023-32749HIGH

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying t

46RISCO

abrir ↗

Referência

CVE-2019-11080

CVE-2019-11080—

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 2

28RISCO

abrir ↗

Referência

CVE-2013-1597

CVE-2013-1597—

A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ

28RISCO

abrir ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RISCO

abrir ↗

Referência

CVE-2022-3792

CVE-2022-3792CRITICAL

SQL Injection in GullsEye Terminal Operating System

53RISCO

abrir ↗

Referência

CVE-2015-9098

CVE-2015-9098—

In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mon

28RISCO

abrir ↗

Referência

CVE-2014-4170

CVE-2014-4170—

A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restric

28RISCO

abrir ↗

Referência

CVE-2016-5679

CVE-2016-5679—

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticat

28RISCO

abrir ↗

Referência

Bitweaver 2.6 - 'saveFeed()' Remote Code Execution

CVE-2009-1669—

The smarty_function_math function in libs/plugins/function.math.php in Smarty 2.6.22 allows context-dependent attackers

28RISCO

abrir ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISCO

abrir ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISCO

abrir ↗

Referência

CVE-2018-9842

CVE-2018-9842—

CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replay

28RISCO

abrir ↗

Referência

CVE-2010-3127

CVE-2010-3127—

Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local users, and possibly remote attackers

28RISCO

abrir ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2010-3426

CVE-2010-3426—

Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remo

43RISCO

abrir ↗

Referência

CVE-2012-5106

CVE-2012-5106—

Stack-based buffer overflow in FreeFloat FTP Server 1.0 allows remote authenticated users to execute arbitrary code via

28RISCO

abrir ↗

Referência

CVE-2019-4013

CVE-2019-4013CRITICAL

IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root pr

53RISCO

abrir ↗

Referência

CVE-2025-9090

CVE-2025-9090MEDIUM

Tenda AC20 Telnet Service telnet websFormDefine command injection

38RISCO

abrir ↗

Referência

CVE-2016-9838

CVE-2016-9838—

An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of

28RISCO

abrir ↗

Referência

CVE-2019-6445

CVE-2019-6445—

An issue was discovered in NTPsec before 1.1.3. An authenticated attacker can cause a NULL pointer dereference and ntpd

28RISCO

abrir ↗

Referência

CVE-2022-22832

CVE-2022-22832—

An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/u

28RISCO

abrir ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2017-9080

CVE-2017-9080—

PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile

50RISCO

abrir ↗

Referência

CVE-2010-0944

CVE-2010-0944—

Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to

43RISCO

abrir ↗

Referência

CVE-2010-1304

CVE-2010-1304—

Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! al

43RISCO

abrir ↗

Referência

CVE-2015-2068

CVE-2015-2068—

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server a

43RISCO

abrir ↗

Referência

CVE-2015-2068

CVE-2015-2068—

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server a

43RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.