Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados
34.597CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.581 exploits
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1652
CVE-2019-1652HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2023-36845
CVE-2023-36845CRITICALsob ataque
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗
Referência
CVE-2023-36845
CVE-2023-36845CRITICALsob ataque
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
100RISCO
abrir ↗
Referência
CVE-2021-44077
CVE-2021-44077CRITICALsob ataque
Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014
100RISCO
abrir ↗
Referência
CVE-2026-7219
CVE-2026-7219HIGH
Totolink N300RT formIpQoS buffer overflow
41RISCO
abrir ↗
Referência
CVE-2026-7218
CVE-2026-7218HIGH
Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow
41RISCO
abrir ↗
Referência
CVE-2009-2242
CVE-2009-2242—
SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execu
23RISCO
abrir ↗
Referência
CVE-2018-10561
CVE-2018-10561CRITICALsob ataque
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?images
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISCO
abrir ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISCO
abrir ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISCO
abrir ↗
Referência
CVE-2019-1663
CVE-2019-1663CRITICAL
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
85RISCO
abrir ↗
Referência★ 25
watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819
CVE-2025-57819CRITICALsob ataque
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
abrir ↗
Referência
CVE-2018-14912
CVE-2018-14912—
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned
60RISCO
abrir ↗
Referência
CVE-2019-16662
CVE-2019-16662—
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a
60RISCO
abrir ↗
Referência
CVE-2019-16662
CVE-2019-16662—
An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to a
60RISCO
abrir ↗
Referência
CVE-2016-4437
CVE-2016-4437CRITICALsob ataque
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
Referência
CVE-2016-4437
CVE-2016-4437CRITICALsob ataque
Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attack
100RISCO
abrir ↗
Referência
File Sharing Wizard 1.5.0 - POST SEH Overflow
CVE-2019-16724—remotewindows
File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Excepti
60RISCO
abrir ↗
Referência
CVE-2019-16759
CVE-2019-16759CRITICALsob ataque
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISCO
abrir ↗
Referência
CVE-2019-16759
CVE-2019-16759CRITICALsob ataque
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISCO
abrir ↗
Referência
CVE-2019-16759
CVE-2019-16759CRITICALsob ataque
vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widge
100RISCO
abrir ↗
Referência
CVE-2022-33891
CVE-2022-33891HIGHsob ataque
Apache Spark shell command injection vulnerability via Spark UI
100RISCO
abrir ↗
Referência
CVE-2023-41892
CVE-2023-41892CRITICAL
Craft CMS Remote Code Execution vulnerability
85RISCO
abrir ↗
Referência
CVE-2016-4010
CVE-2016-4010—
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary
60RISCO
abrir ↗
Referência
CVE-2016-4010
CVE-2016-4010—
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary
60RISCO
abrir ↗
← anteriorpágina 243 / 720próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.