Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.114exploits catalogados

31.649CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.810GitHub PoC 13.116VulnCheck XDB 8.069Nuclei 4.188Metasploit 3.462✓ só verificadosrecentes populares risco

19.791 exploits

Referência

CVE-2010-2703

CVE-2010-2703—

Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM)

60RISCO

abrir ↗

Referência

CVE-2017-8755

CVE-2017-8755—

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary

45RISCO

abrir ↗

Referência

CVE-2016-1909

CVE-2016-1909—

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0

60RISCO

abrir ↗

Referência

CVE-2016-1909

CVE-2016-1909—

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0

60RISCO

abrir ↗

Referência

CVE-2018-10094

CVE-2018-10094—

SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vecto

60RISCO

abrir ↗

Referência

Powl 0.94 - 'htmledit.php' Remote File Inclusion

CVE-2007-3371—

PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to

45RISCO

abrir ↗

Referência

CVE-2012-4876

CVE-2012-4876—

Stack-based buffer overflow in the UltraMJCam ActiveX Control in TRENDnet SecurView TV-IP121WN Wireless Internet Camera

60RISCO

abrir ↗

Referência

CVE-2020-8518

CVE-2020-8518—

Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execu

60RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

CVE-2016-2386

CVE-2016-2386CRITICALsob ataque

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbi

100RISCO

abrir ↗

Referência

phpBG 0.9.1 - 'rootdir' Remote File Inclusion

CVE-2007-4636—

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code v

45RISCO

abrir ↗

Referência

CVE-2026-7068

CVE-2026-7068HIGH

D-Link DIR-825 nmbd sserver.c NMBD_process buffer overflow

41RISCO

abrir ↗

Referência

CVE-2021-4039

CVE-2021-4039CRITICAL

A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exec

70RISCO

abrir ↗

Referência

CVE-2015-2509

CVE-2015-2509—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo

60RISCO

abrir ↗

Referência

CVE-2015-2509

CVE-2015-2509—

Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remo

60RISCO

abrir ↗

Referência

CVE-2018-8279

CVE-2018-8279—

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

45RISCO

abrir ↗

Referência

CVE-2017-8895

CVE-2017-8895—

In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a u

60RISCO

abrir ↗

Referência

CVE-2013-4835

CVE-2013-4835—

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authenti

60RISCO

abrir ↗

Referência

CVE-2011-3492

CVE-2011-3492—

Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial

60RISCO

abrir ↗

Referência

CVE-2020-17456

CVE-2020-17456—

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa

60RISCO

abrir ↗

Referência

CVE-2020-17456

CVE-2020-17456—

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa

60RISCO

abrir ↗

Referência

Seowon SLR-120 Router - Remote Code Execution (Unauthenticated)

CVE-2020-17456—

SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the ipAddr parameter to the system_log.cgi pa

60RISCO

abrir ↗

Referência

CVE-2014-5460

CVE-2014-5460—

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot

60RISCO

abrir ↗

Referência

CVE-2014-5460

CVE-2014-5460—

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot

60RISCO

abrir ↗

Referência

CVE-2014-5460

CVE-2014-5460—

Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remot

60RISCO

abrir ↗

Referência

CVE-2016-5675

CVE-2016-5675—

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 th

60RISCO

abrir ↗

Referência

CVE-2020-11456

CVE-2020-11456—

LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati

45RISCO

abrir ↗

Referência

LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting

CVE-2020-11456—

LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and applicati

45RISCO

abrir ↗

Referência

CVE-2018-7490

CVE-2018-7490—

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversa

50RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.