Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.386exploits catalogados

36.533CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.466Referência 23.104GitHub PoC 15.075VulnCheck XDB 8.883Nuclei 4.365Metasploit 3.493✓ só verificadosrecentes populares risco

23.051 exploits

Referência

CVE-2017-14491

CVE-2017-14491—

Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut

45RISCO

abrir ↗

Referência

CVE-2017-2741

CVE-2017-2741—

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa

60RISCO

abrir ↗

Referência

CVE-2017-2741

CVE-2017-2741—

A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmwa

60RISCO

abrir ↗

Referência

CVE-2023-38950

CVE-2023-38950HIGHsob ataque

A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbit

100RISCO

abrir ↗

Referência

CVE-2019-8449

CVE-2019-8449—

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate username

60RISCO

abrir ↗

Referência

CVE-2015-6132

CVE-2015-6132—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

60RISCO

abrir ↗

Referência✓ VexDay Proof

PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion

CVE-2007-2341—webappsphp

PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbi

23RISCO

abrir ↗

Referência

CVE-2015-7858

CVE-2015-7858—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RISCO

abrir ↗

Referência

CVE-2015-7858

CVE-2015-7858—

SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via un

60RISCO

abrir ↗

Referência

CVE-2018-1000006

CVE-2018-1000006—

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the pro

60RISCO

abrir ↗

Referência

CVE-2018-1000006

CVE-2018-1000006—

GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the pro

60RISCO

abrir ↗

Referência

CVE-2009-2389

CVE-2009-2389—

Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled,

23RISCO

abrir ↗

Referência

CVE-2026-7098

CVE-2026-7098HIGH

Tenda F456 httpd DhcpListClient fromDhcpListClient buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7097

CVE-2026-7097HIGH

Tenda F456 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow

41RISCO

abrir ↗

Referência

CVE-2026-7096

CVE-2026-7096HIGH

Tenda HG3 formgponConf os command injection

41RISCO

abrir ↗

Referência

CVE-2026-7095

CVE-2026-7095MEDIUM

code-projects Employee Management System edit.php cross site scripting

33RISCO

abrir ↗

Referência

CVE-2026-7094

CVE-2026-7094MEDIUM

ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery

33RISCO

abrir ↗

Referência

CVE-2019-20499

CVE-2019-20499—

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

CVE-2020-28949

CVE-2020-28949HIGHsob ataque

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper

100RISCO

abrir ↗

Referência✓ VexDay Proof

PHPortal 1.2 - Multiple Remote File Inclusions

CVE-2008-3022—webappsphp

Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remot

23RISCO

abrir ↗

Referência✓ VexDay Proof

Efestech Shop 2.0 - 'cat_id' SQL Injection

CVE-2008-3030—webappsphp

SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Absolute Poll Manager XE 4.1 - 'xlacomments.asp' SQL Injection

CVE-2008-4569—webappsasp

SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Microsoft HTML Workshop 4.74 - Universal Buffer Overflow

CVE-2009-0133—localwindows

Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary

50RISCO

abrir ↗

Referência✓ VexDay Proof

Acoustica MP3 CD Burner 4.51 Build 147 - '.asx' Local Buffer Overflow

CVE-2007-3006—localwindows

Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .a

23RISCO

abrir ↗

Referência

CVE-2012-2741

CVE-2012-2741—

Cross-site scripting (XSS) vulnerability in public_html/lists/admin/ in phpList before 2.10.18 allows remote attackers t

23RISCO

abrir ↗

Referência

D-Link DWL-2600AP - Multiple OS Command Injection

CVE-2019-20499—webappshardware

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Config

60RISCO

abrir ↗

Referência

CVE-2018-6000

CVE-2018-6000—

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpn

60RISCO

abrir ↗

Referência

CVE-2018-6000

CVE-2018-6000—

An issue was discovered in AsusWRT before 3.0.0.4.384_10007. The do_vpnupload_post function in router/httpd/web.c in vpn

60RISCO

abrir ↗

Referência

CVE-2018-17431

CVE-2018-17431—

Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execute arbitrary code without authentication

60RISCO

abrir ↗

Referência

CVE-2019-12314

CVE-2019-12314—

Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path traversal in the WS.macx1.W_MCS/ PATH_INFO, as

60RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.