Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.035exploits catalogados
39.531CVEs com exploração pública
24.695testados em laboratório
9.636 exploits
VulnCheck XDB
initial-access
CVE-2025-32432CRITICALsob ataque14 set 2026
Craft CMS Allows Remote Code Execution
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque14 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque14 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-48384HIGHsob ataque14 set 2026
Git allows arbitrary code execution through broken config quoting
71RISCO
abrir ↗
VulnCheck XDB
local
CVE-2021-4034HIGHsob ataqueransomware14 set 2026
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2025-38352HIGHsob ataque14 set 2026
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
71RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-42018HIGHsob ataque14 set 2026
Anonymous user token generation exposure in JFrog Artifactory
66RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-80099HIGH14 set 2026
Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret
56RISCO
abrir ↗
VulnCheck XDB
local
CVE-2024-51324LOW14 set 2026
An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via ex
28RISCO
abrir ↗
VulnCheck XDB
local
CVE-2016-5195HIGHsob ataque14 set 2026
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-32432CRITICALsob ataque14 set 2026
Craft CMS Allows Remote Code Execution
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque13 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque13 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque13 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-50751CRITICALsob ataqueransomware13 set 2026
User Authentication Bypass in VPN Remote Access and Mobile Access
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2025-24071MEDIUM13 set 2026
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2026-85046HIGHsob ataque12 set 2026
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside
83RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-49049HIGH12 set 2026
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
56RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2026-87491HIGHsob ataque12 set 2026
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code in
71RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-24813CRITICALsob ataque12 set 2026
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-75650CRITICALsob ataque12 set 2026
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
78RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-85706CRITICALsob ataque12 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-78006CRITICAL12 set 2026
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution
48RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-85706CRITICALsob ataque11 set 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-28496CRITICAL11 set 2026
FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
63RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-33017CRITICALsob ataque11 set 2026
Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint
98RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 set 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-18963CRITICAL11 set 2026
Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
63RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-89013HIGH11 set 2026
Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php
56RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-0847HIGHsob ataque11 set 2026
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗
← anteriorpágina 14 / 322próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.