Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.526exploits catalogados
34.478CVEs com exploração pública
24.695testados em laboratório
8.198 exploits
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware24 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-30632HIGHsob ataque20 set 2021
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap c
83RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware20 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2015-5122HIGHsob ataque19 set 2021
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware19 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2015-5119HIGHsob ataque19 set 2021
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware18 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-26084CRITICALsob ataqueransomware18 set 2021
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-3129CRITICALsob ataqueransomware17 set 2021
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware16 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-38647CRITICALsob ataqueransomware15 set 2021
Open Management Infrastructure Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware15 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-33766HIGHsob ataque15 set 2021
Microsoft Exchange Server Information Disclosure Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware14 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware13 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2020-2865313 set 2021
Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution v
60RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware12 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware12 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-3493HIGHsob ataque12 set 2021
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir
VulnCheck XDB
local
CVE-2016-5195HIGHsob ataque12 set 2021
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2019-1960911 set 2021
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin c
35RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-25078HIGHsob ataque10 set 2021
An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices. The unauthenticate
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware10 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware09 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-40444HIGHsob ataqueransomware09 set 2021
Microsoft MSHTML Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-9054CRITICALsob ataque09 set 2021
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2020-5410HIGHsob ataque08 set 2021
Directory Traversal with spring-cloud-config-server
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2019-11708CRITICALsob ataque08 set 2021
Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result
90RISCO
abrir
VulnCheck XDB
client-side
CVE-2021-26084CRITICALsob ataqueransomware08 set 2021
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
anteriorpágina 212 / 274próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.