Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados

32.133CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 19.967GitHub PoC 13.264VulnCheck XDB 8.156Nuclei 4.201Metasploit 3.462✓ só verificadosrecentes populares risco

19.934 exploits

Referência

CVE-2020-8656

CVE-2020-8656—

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthe

60RISCO

abrir ↗

Referência

CVE-2016-8022

CVE-2016-8022—

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)

28RISCO

abrir ↗

Referência

CVE-2018-8898

CVE-2018-8898—

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B0

28RISCO

abrir ↗

Referência

CVE-2018-8898

CVE-2018-8898—

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B0

28RISCO

abrir ↗

Referência

CVE-2019-12828

CVE-2019-12828—

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and orig

28RISCO

abrir ↗

Referência

Cisco IP Phone 7940 - Reboot (Denial of Service)

CVE-2006-0179—

The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pack

28RISCO

abrir ↗

Referência

CVE-2015-0565

CVE-2015-0565—

NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

28RISCO

abrir ↗

Referência

CVE-2015-0565

CVE-2015-0565—

NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.

28RISCO

abrir ↗

Referência

CVE-2018-7448

CVE-2018-7448—

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote

28RISCO

abrir ↗

Referência

CVE-2018-7448

CVE-2018-7448—

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote

28RISCO

abrir ↗

Referência

CVE-2018-7921

CVE-2018-7921—

Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjace

28RISCO

abrir ↗

Referência

CVE-2015-1830

CVE-2015-1830—

Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5

60RISCO

abrir ↗

Referência

CVE-2010-5330

CVE-2010-5330CRITICALsob ataque

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the if

90RISCO

abrir ↗

Referência

Joomla! Component ChronoForms 2.3.5 - Remote File Inclusion

CVE-2008-0567—

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for J

35RISCO

abrir ↗

Referência

CVE-2017-17090

CVE-2017-17090—

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and old

45RISCO

abrir ↗

Referência

Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE

CVE-2025-1097HIGH

ingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation

68RISCO

abrir ↗

Referência

CVE-2014-8682

CVE-2014-8682—

Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r

50RISCO

abrir ↗

Referência

CVE-2017-14495

CVE-2017-14495—

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote

45RISCO

abrir ↗

Referência

CVE-2014-8682

CVE-2014-8682—

Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 through 0.5.x before 0.5.6.1105 Beta allow r

50RISCO

abrir ↗

Referência

CVE-2015-1376

CVE-2015-1376—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remot

50RISCO

abrir ↗

Referência

CVE-2022-25236

CVE-2022-25236CRITICAL

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace

60RISCO

abrir ↗

Referência

Photoshop CS2/CS3 / Paint Shop Pro 11.20 - '.png' Local Buffer Overflow

CVE-2007-2366—

Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a craf

35RISCO

abrir ↗

Referência

CVE-2017-11281

CVE-2017-11281—

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita

35RISCO

abrir ↗

Referência

CVE-2017-11281

CVE-2017-11281—

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita

35RISCO

abrir ↗

Referência

CVE-2015-2995

CVE-2015-2995—

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at

50RISCO

abrir ↗

Referência

CVE-2015-2995

CVE-2015-2995—

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote at

50RISCO

abrir ↗

Referência

CVE-2010-1342

CVE-2010-1342—

Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when register_globals is enabled, allow remote

23RISCO

abrir ↗

Referência

CVE-2019-12480

CVE-2019-12480—

BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a

35RISCO

abrir ↗

Referência

CVE-2014-8499

CVE-2014-8499—

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi

50RISCO

abrir ↗

Referência

CVE-2014-8499

CVE-2014-8499—

Multiple SQL injection vulnerabilities in ManageEngine Password Manager Pro (PMP) and Password Manager Pro Managed Servi

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.