Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

CVE-2014-4019

CVE-2014-4019—

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient

28RISCO

abrir ↗

Referência

CVE-2014-4019

CVE-2014-4019—

ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient

28RISCO

abrir ↗

Referência

Amaya 11.1 - W3C Editor/Browser (defer) Stack Overflow (PoC)

CVE-2009-1209—

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

CVE-2009-1209—

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script

28RISCO

abrir ↗

Referência

CVE-2016-7567

CVE-2016-7567—

Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have

28RISCO

abrir ↗

Referência

CVE-2016-4314

CVE-2016-4314—

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated admini

28RISCO

abrir ↗

Referência

CVE-2016-4314

CVE-2016-4314—

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated admini

28RISCO

abrir ↗

Referência

CVE-2016-10401

CVE-2016-10401—

ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access

28RISCO

abrir ↗

Referência

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow (2)

CVE-2007-3148—

Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows

28RISCO

abrir ↗

Referência

CVE-2020-10386

CVE-2020-10386—

admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Exe

28RISCO

abrir ↗

Referência

PHPKB Multi-Language 9 - 'image-upload.php' Authenticated Remote Code Execution

CVE-2020-10386—

admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Exe

28RISCO

abrir ↗

Referência

CVE-2025-34035

CVE-2025-34035CRITICAL

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

68RISCO

abrir ↗

Referência

CVE-2025-34035

CVE-2025-34035CRITICAL

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

68RISCO

abrir ↗

Referência

CVE-2025-34035

CVE-2025-34035CRITICAL

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

68RISCO

abrir ↗

Referência

CVE-2025-34035

CVE-2025-34035CRITICAL

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

68RISCO

abrir ↗

Referência

CVE-2018-15767

CVE-2018-15767—

Improper Authorization Vulnerability

28RISCO

abrir ↗

Referência

CVE-2016-6174

CVE-2016-6174—

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Bo

28RISCO

abrir ↗

Referência

CVE-2014-1216

CVE-2014-1216—

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAN

23RISCO

abrir ↗

Referência

Joomla! Component RWCards 3.0.11 - Local File Inclusion

CVE-2008-6172—

Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!

43RISCO

abrir ↗

Referência

CVE-2007-3655

CVE-2007-3655—

Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and e

28RISCO

abrir ↗

Referência

CVE-2014-100015

CVE-2014-100015—

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t

50RISCO

abrir ↗

Referência

CVE-2017-7185

CVE-2017-7185—

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embed

28RISCO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RISCO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RISCO

abrir ↗

Referência

CVE-2019-17554

CVE-2019-17554—

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resoluti

28RISCO

abrir ↗

Referência

CVE-2018-15705

CVE-2018-15705—

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any f

28RISCO

abrir ↗

Referência

CVE-2020-15500

CVE-2020-15500—

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected u

43RISCO

abrir ↗

Referência

Adobe Acrobat 9 - ActiveX Remote Denial of Service

CVE-2008-4071—

A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows rem

28RISCO

abrir ↗

Referência

CVE-2018-5406

CVE-2018-5406—

The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.

28RISCO

abrir ↗

Referência

CVE-2013-6021

CVE-2013-6021—

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.