Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.957exploits catalogados

32.195CVEs com exploração pública

1.932testados em laboratório

Todos Exploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentes populares risco

20.003 exploits

Referência

MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass

CVE-2008-0782—

Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via

28RISCO

abrir ↗

Referência

CVE-2017-14243

CVE-2017-14243—

An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers

28RISCO

abrir ↗

Referência

CVE-2014-9463

CVE-2014-9463—

functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code v

28RISCO

abrir ↗

Referência

CVE-2013-5962

CVE-2013-5962—

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 r

28RISCO

abrir ↗

Referência

CVE-2013-5962

CVE-2013-5962—

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 r

28RISCO

abrir ↗

Referência

CVE-2017-8982

CVE-2017-8982—

A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E05

28RISCO

abrir ↗

Referência

CVE-2014-8791

CVE-2014-8791—

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated

43RISCO

abrir ↗

Referência

CVE-2018-6409

CVE-2018-6409—

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path fr

28RISCO

abrir ↗

Referência

CVE-2008-1160

CVE-2008-1160—

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a u

28RISCO

abrir ↗

Referência

ZYXEL ZyWALL Quagga/Zebra - 'Default Password' Remote Code Execution

CVE-2008-1160—

ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a u

28RISCO

abrir ↗

Referência

WordPress Plugin myflash 1.00 - 'wppath' Remote File Inclusion

CVE-2007-2485—

PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allow

35RISCO

abrir ↗

Referência

CVE-2017-3807

CVE-2017-3807—

A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software,

28RISCO

abrir ↗

Referência

Move Networks Upgrade Manager Control - Remote Buffer Overflow

CVE-2008-0477—

Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgra

28RISCO

abrir ↗

Referência

CVE-2018-5511

CVE-2018-5511—

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Manageme

28RISCO

abrir ↗

Referência

CVE-2018-5511

CVE-2018-5511—

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Manageme

28RISCO

abrir ↗

Referência

CVE-2009-2692

CVE-2009-2692—

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke

43RISCO

abrir ↗

Referência

CVE-2009-2692

CVE-2009-2692—

The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socke

43RISCO

abrir ↗

Referência

CVE-2010-1659

CVE-2010-1659—

Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows rem

43RISCO

abrir ↗

Referência

CVE-2016-10718

CVE-2016-10718—

Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial

28RISCO

abrir ↗

Referência

CVE-2018-0891

CVE-2018-0891—

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT

28RISCO

abrir ↗

Referência

CVE-2025-8356

CVE-2025-8356CRITICAL

Path Traversal leading to RCE

53RISCO

abrir ↗

Referência

CVE-2018-7702

CVE-2018-7702—

SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend e

28RISCO

abrir ↗

Referência

BitchX 1.1 Final - MODE Remote Heap Overflow

CVE-2007-4584—

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in

28RISCO

abrir ↗

Referência

CVE-2022-24715

CVE-2022-24715HIGH

Arbitrary code execution for authenticated users in Icinga Web 2

46RISCO

abrir ↗

Referência

Centos WebPanel 7 - 'term' SQL Injection

CVE-2020-10230—

CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/adm

28RISCO

abrir ↗

Referência

CVE-2020-10963

CVE-2020-10963—

FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution)

28RISCO

abrir ↗

Referência

CVE-2014-7186

CVE-2014-7186—

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial o

35RISCO

abrir ↗

Referência

CVE-2016-3357

CVE-2016-3357—

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 20

35RISCO

abrir ↗

Referência

Libxine 1.14 - MPEG Stream Buffer Overflow (PoC)

CVE-2006-1664—

Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, a

28RISCO

abrir ↗

Referência

CVE-2009-3663

CVE-2009-3663—

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.