Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.554GitHub PoC 13.689VulnCheck XDB 8.216Nuclei 4.223Metasploit 3.464✓ só verificadosrecentespopularesrisco
24.443 exploits
Exploit-DB✓ VexDay Proof
MoinMoin - Arbitrary Command Execution
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anyw
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
MoinMoin - Arbitrary Command Execution
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action
50RISCO
abrir ↗Exploit-DB
ColdFusion 9-10 - Credential Disclosure
Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files
60RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cisco Linksys E4200 1.0.05 Build 7 devices store passwords in cleartext allowing remote attackers to obtain sensitive in
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetApp OnCommand System Manager - '/zapiServlet' User Management Interface Multiple Cross-Site Scripting Vulnerabilities
Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB
Huawei SNMPv3 Service - Multiple Buffer Overflow Vulnerabilities (PoC)
Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 is enabled, allow remote attackers to cause a denial of se
23RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers
28RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Clickjacking Vulnerability which allows remote attackers to obtain
23RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
NetApp OnCommand System Manager - '/zapiServlet' CIFS Configuration Management Interface Multiple Cross-Site Scripting Vulnerabilities
Cross-site Scripting (XSS) vulnerability in NetApp OnCommand System Manager before 2.2 allows remote attackers to inject
23RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web
23RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow rem
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Microsoft Internet Explorer - CGenericElement Object Use-After-Free (Metasploit)
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbit
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
b2evolution 4.1.6 - Multiple Vulnerabilities
SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to
23RISCO
abrir ↗Exploit-DB
Huawei SNMPv3 Service - Multiple Buffer Overflow Vulnerabilities (PoC)
Stack-based buffer overflow on Huawei AR 150, 200, 1200, 2200, and 3200 routers, when SNMPv3 debugging is enabled, allow
23RISCO
abrir ↗Exploit-DB
Cisco Linksys E4200 - Multiple Vulnerabilities
Cisco Linksys E4200 1.0.05 Build 7 devices contain an Information Disclosure Vulnerability which allows remote attackers
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WordPress Plugin W3 Total Cache - PHP Code Execution (Metasploit)
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
60RISCO
abrir ↗Exploit-DB✓ VexDay Proof
FuzeZip 1.0.0.131625 - Local Buffer Overflow (SEH)
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WPS Office - 'Wpsio.dll' Stack Buffer Overflow
Stack-based buffer overflow in wpsio.dll in Kingsoft WPS Office 2012 possibly 8.1.0.3238 allows remote attackers to exec
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
WinArchiver 3.2 - Local Buffer Overflow (SEH)
Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip f
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firm
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the
35RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to th
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET requ
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP pac
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Vivotek IP Cameras - Multiple Vulnerabilities
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wire
23RISCO
abrir ↗Exploit-DB✓ VexDay Proof
phpMyAdmin - 'preg_replace' (Authenticated) Remote Code Execution (Metasploit)
phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a
43RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP ses
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processin
28RISCO
abrir ↗Exploit-DB✓ VexDay Proof
D-Link IP Cameras - Multiple Vulnerabilities
An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DC
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.