Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2016-1793

CVE-2016-1793—

AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged

23RISCO

abrir ↗

Referência

CVE-2016-1794

CVE-2016-1794—

The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attack

23RISCO

abrir ↗

Referência

CVE-2022-45639

CVE-2022-45639HIGH

OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a cra

41RISCO

abrir ↗

Referência

CVE-2026-3485

CVE-2026-3485CRITICAL

D-Link DIR-868L SSDP Service sub_1BF84 os command injection

48RISCO

abrir ↗

Referência

CVE-2015-2682

CVE-2015-2682—

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via

28RISCO

abrir ↗

Referência

CVE-2014-9142

CVE-2014-9142—

Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2014-9142

CVE-2014-9142—

Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers t

23RISCO

abrir ↗

Referência

CVE-2015-2682

CVE-2015-2682—

Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via

28RISCO

abrir ↗

Referência

RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot)

CVE-2020-13259—webappshardware

A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauth

23RISCO

abrir ↗

Referência

CVE-2024-0204

CVE-2024-0204CRITICAL

Authentication Bypass in GoAnywhere MFT

85RISCO

abrir ↗

Referência

CVE-2012-5875

CVE-2012-5875—

Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1

28RISCO

abrir ↗

Referência

CVE-2019-12962

CVE-2019-12962—

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.

38RISCO

abrir ↗

Referência✓ VexDay Proof

Zomplog 3.8.1 - Arbitrary File Upload

CVE-2007-5230—webappsphp

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote a

23RISCO

abrir ↗

Referência✓ VexDay Proof

WinRemotePC Full+Lite 2008 r.2server - Denial of Service

CVE-2008-3269—doswindows

WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of s

28RISCO

abrir ↗

Referência✓ VexDay Proof

WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting

CVE-2009-1030—webappsphp

Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPr

23RISCO

abrir ↗

Referência

CVE-2017-11661

CVE-2017-11661—

The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory

28RISCO

abrir ↗

Referência

CVE-2013-3075

CVE-2013-3075—

Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities

28RISCO

abrir ↗

Referência

CVE-2012-0781

CVE-2012-0781—

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer derefere

28RISCO

abrir ↗

Referência

CVE-2018-19125

CVE-2018-19125—

PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.

28RISCO

abrir ↗

Referência

CVE-2019-1674

CVE-2019-1674HIGH

Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability

46RISCO

abrir ↗

Referência

CVE-2017-20216

CVE-2017-20216CRITICAL

FLIR Thermal Camera PT-Series firmware version 8.0.0.64 Unauthenticated Remote Command Injection

53RISCO

abrir ↗

Referência

CVE-2011-0962

CVE-2011-0962—

Cross-site scripting (XSS) vulnerability in CSCOnm/servlet/com.cisco.nm.help.ServerHelpEngine in the Common Services Dev

23RISCO

abrir ↗

Referência

CVE-2010-1308

CVE-2010-1308—

Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for Joomla! allows remote attackers to read a

43RISCO

abrir ↗

Referência

CVE-2016-7400

CVE-2016-7400—

Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2010-1312

CVE-2010-1312—

Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) component 1.5.x for Joomla! allows remote

43RISCO

abrir ↗

Referência

CVE-2018-15768

CVE-2018-15768—

Insecure MySQL Configuration Vulnerability

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2012-5684

CVE-2012-5684—

Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitrary web sc

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Referência

CVE-2013-6923

CVE-2013-6923—

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.