Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.062exploits catalogados
31.617CVEs com exploração pública
0testados em laboratório
8.069 exploits
VulnCheck XDB
initial-access
CVE-2023-27350CRITICALsob ataqueransomware30 mai 2026
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-1263529 mai 2026
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be
60RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2022-26923HIGHsob ataque29 mai 2026
Active Directory Domain Services Elevation of Privilege Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-47176MEDIUM29 mai 2026
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALsob ataque29 mai 2026
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-0257HIGHsob ataque29 mai 2026
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-42945CRITICAL28 mai 2026
NGINX ngx_http_rewrite_module vulnerability
60RISCO
abrir
VulnCheck XDB
info-leak
CVE-2023-26083LOWsob ataque28 mai 2026
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
58RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-31431HIGHsob ataque28 mai 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-2093328 mai 2026
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.
50RISCO
abrir
VulnCheck XDB
initial-access
CVE-2019-6340HIGHsob ataque27 mai 2026
Drupal core - Highly critical - Remote Code Execution
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-3560HIGHsob ataque27 mai 2026
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir
VulnCheck XDB
info-leak
CVE-2026-26980CRITICAL27 mai 2026
Ghost has a SQL Injection in its Content API
75RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-1161027 mai 2026
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem
60RISCO
abrir
VulnCheck XDB
info-leak
CVE-2026-9082CRITICALsob ataque27 mai 2026
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-54123CRITICAL27 mai 2026
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
68RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALsob ataque27 mai 2026
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALsob ataque27 mai 2026
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-3296CRITICAL26 mai 2026
Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata
48RISCO
abrir
VulnCheck XDB
local
CVE-2026-43284HIGH26 mai 2026
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware26 mai 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-20182CRITICALsob ataque26 mai 2026
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-9082CRITICALsob ataque26 mai 2026
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2026-42945CRITICAL25 mai 2026
NGINX ngx_http_rewrite_module vulnerability
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware25 mai 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2020-1938CRITICALsob ataque25 mai 2026
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware25 mai 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2024-34102CRITICALsob ataque25 mai 2026
XXE can expose crypt key and other secrets granting full admin access
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-42945CRITICAL25 mai 2026
NGINX ngx_http_rewrite_module vulnerability
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware24 mai 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
anteriorpágina 11 / 269próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.