Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.445exploits catalogados

34.432CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.497GitHub PoC 13.627VulnCheck XDB 8.198Nuclei 4.217Metasploit 3.463✓ só verificadosrecentes populares risco

21.497 exploits

Referência

CVE-2018-10258

CVE-2018-10258—

A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges to

23RISCO

abrir ↗

Referência

CVE-2017-6549

CVE-2017-6549—

Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W

23RISCO

abrir ↗

Referência

CVE-2020-11803

CVE-2020-11803—

An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with th

23RISCO

abrir ↗

Referência

CVE-2019-17124

CVE-2019-17124—

Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

28RISCO

abrir ↗

Referência

CVE-2015-6402

CVE-2015-6402—

Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11,

23RISCO

abrir ↗

Referência

CVE-2020-7384

CVE-2020-7384HIGH

Client-Side Command Injection in Rapid7 Metasploit

68RISCO

abrir ↗

Referência

CVE-2010-0380

CVE-2010-0380—

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictio

23RISCO

abrir ↗

Referência

CVE-2016-2279

CVE-2016-2279MEDIUM

Cross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley CompactLogix 1769-L* bef

33RISCO

abrir ↗

Referência

CVE-2011-4877

CVE-2011-4877—

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP,

23RISCO

abrir ↗

Referência

CVE-2019-6279

CVE-2019-6279—

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnera

23RISCO

abrir ↗

Referência

CVE-2010-0380

CVE-2010-0380—

install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictio

23RISCO

abrir ↗

Referência

CVE-2017-7037

CVE-2017-7037—

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iClo

23RISCO

abrir ↗

Referência

CVE-2014-8949

CVE-2014-8949—

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2014-8949

CVE-2014-8949—

The iMember360 plugin 3.8.012 through 3.9.001 for WordPress allows remote authenticated administrators to execute arbitr

23RISCO

abrir ↗

Referência

CVE-2014-5370

CVE-2014-5370—

Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDra

23RISCO

abrir ↗

Referência

CVE-2014-5370

CVE-2014-5370—

Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDra

23RISCO

abrir ↗

Referência

CVE-2015-5074

CVE-2015-5074—

Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php

23RISCO

abrir ↗

Referência

CVE-2015-5074

CVE-2015-5074—

Incomplete blacklist vulnerability in the FileUploadsFilter class in protected/components/filters/FileUploadsFilter.php

23RISCO

abrir ↗

Referência

CVE-2016-7098

CVE-2016-7098—

Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow

23RISCO

abrir ↗

Referência

CVE-2023-27167

CVE-2023-27167MEDIUM

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/abs

33RISCO

abrir ↗

Referência

CVE-2015-6639

CVE-2015-6639—

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mail Machine 3.989 - Local File Inclusion

CVE-2007-3702—webappsphp

Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft Windows Wordpad - '.doc' File Local Denial of Service (PoC)

CVE-2009-0259—doswindows

The Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a denial of service (crash) an

23RISCO

abrir ↗

Referência

CVE-2018-20735

CVE-2018-20735—

An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for l

38RISCO

abrir ↗

Referência

CVE-2020-5844

CVE-2020-5844—

index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators t

35RISCO

abrir ↗

Referência

CVE-2014-9262

CVE-2014-9262—

The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

23RISCO

abrir ↗

Referência

CVE-2025-2620

CVE-2025-2620CRITICAL

D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

48RISCO

abrir ↗

Referência

CVE-2017-9936

CVE-2017-9936—

In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a

23RISCO

abrir ↗

Referência

CVE-2021-21972

CVE-2021-21972CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion

CVE-2006-4424—webappsphp

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execu

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.