Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados
31.617CVEs com exploração pública
0testados em laboratório
TodosExploit-DB 22.467Referência 19.791GitHub PoC 13.086VulnCheck XDB 8.069Nuclei 4.187Metasploit 3.462✓ só verificadosrecentespopularesrisco
19.791 exploits
Referência
CVE-2018-1002105
CVE-2018-1002105CRITICAL
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upg
70RISCO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHsob ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RISCO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHsob ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RISCO
abrir ↗
Referência
CVE-2018-9276
CVE-2018-9276HIGHsob ataque
An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administra
100RISCO
abrir ↗
Referência
Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow
CVE-2008-4193—
Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers t
60RISCO
abrir ↗
Referência
CVE-2010-1743
CVE-2010-1743—
SQL injection vulnerability in projects.php in Scratcher allows remote attackers to execute arbitrary SQL commands via t
23RISCO
abrir ↗
Referência
CVE-2016-6603
CVE-2016-6603—
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users v
45RISCO
abrir ↗
Referência
CVE-2016-6603
CVE-2016-6603—
ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users v
45RISCO
abrir ↗
Referência
CVE-2021-24762
CVE-2021-24762—
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISCO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHsob ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RISCO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHsob ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RISCO
abrir ↗
Referência
CVE-2020-0674
CVE-2020-0674HIGHsob ataque
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet
93RISCO
abrir ↗
Referência
CVE-2015-8103
CVE-2015-8103—
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RISCO
abrir ↗
Referência
CVE-2015-8103
CVE-2015-8103—
The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary co
60RISCO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISCO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISCO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISCO
abrir ↗
Referência
CVE-2018-1160
CVE-2018-1160CRITICAL
Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking
70RISCO
abrir ↗
Referência
CVE-2020-13151
CVE-2020-13151—
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)
60RISCO
abrir ↗
Referência
CVE-2020-13151
CVE-2020-13151—
Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs)
60RISCO
abrir ↗
Referência
CVE-2017-5816
CVE-2017-5816—
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RISCO
abrir ↗
Referência
CVE-2017-5816
CVE-2017-5816—
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
60RISCO
abrir ↗
Referência
CVE-2021-32305
CVE-2021-32305—
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search paramet
60RISCO
abrir ↗
Referência
CVE-2015-2426
CVE-2015-2426HIGHsob ataque
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2
100RISCO
abrir ↗
Referência
CVE-2020-8644
CVE-2020-8644CRITICALsob ataque
PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
100RISCO
abrir ↗
Referência
CVE-2018-10661
CVE-2018-10661—
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control.
60RISCO
abrir ↗
Referência
CVE-2026-7113
CVE-2026-7113MEDIUM
NousResearch hermes-agent Webhooks Endpoint webhook.py missing authentication
33RISCO
abrir ↗
Referência
CVE-2026-7112
CVE-2026-7112MEDIUM
NousResearch hermes-agent API_SERVER_KEY api_server.py _check_auth improper authentication
33RISCO
abrir ↗
Referência
CVE-2026-7110
CVE-2026-7110MEDIUM
code-projects Invoice System in Laravel item cross site scripting
33RISCO
abrir ↗
Referência
CVE-2026-7109
CVE-2026-7109MEDIUM
code-projects Invoice System in Laravel API Endpoint item improper authorization
33RISCO
abrir ↗
← anteriorpágina 19 / 660próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.