Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.008exploits catalogados
34.638CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.662GitHub PoC 13.743VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.662 exploits
Referência
CVE-2021-39316
CVE-2021-39316HIGH
ZoomSounds <= 6.45 Unauthenticated Directory Traversal and Sensitive Information Dislosure
68RISCO
abrir ↗
Referência
Wordpress Plugin BulletProof Security 5.1 - Sensitive Information Disclosure
CVE-2021-39327MEDIUMwebappsphp
BulletProof Security <= 5.1 Sensitive Information Disclosure
70RISCO
abrir ↗
Referência
CVE-2021-4034
CVE-2021-4034HIGHsob ataque
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
Referência
CVE-2021-4034
CVE-2021-4034HIGHsob ataque
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
Referência
CVE-2021-21985
CVE-2021-21985CRITICALsob ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISCO
abrir ↗
Referência
CVE-2021-21985
CVE-2021-21985CRITICALsob ataqueransomware
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual
100RISCO
abrir ↗
Referência
CVE-2024-21887
CVE-2024-21887CRITICALsob ataqueransomware
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,
100RISCO
abrir ↗
Referência
CVE-2021-26084
CVE-2021-26084CRITICALsob ataqueransomware
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
Referência
CVE-2021-40964
CVE-2021-40964—
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to
23RISCO
abrir ↗
Referência
CVE-2021-41318
CVE-2021-41318—
In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input.
23RISCO
abrir ↗
Referência
CVE-2021-41773
CVE-2021-41773HIGHsob ataqueransomware
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
Referência
CVE-2022-29464
CVE-2022-29464CRITICALsob ataqueransomware
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISCO
abrir ↗
Referência
CVE-2021-35464
CVE-2021-35464CRITICALsob ataqueransomware
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa
100RISCO
abrir ↗
Referência
CVE-2021-35464
CVE-2021-35464CRITICALsob ataqueransomware
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pa
100RISCO
abrir ↗
Referência
CVE-2024-23897
CVE-2024-23897CRITICALsob ataqueransomware
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
Referência
CVE-2024-23897
CVE-2024-23897CRITICALsob ataqueransomware
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir ↗
Referência
CVE-2023-4966
CVE-2023-4966CRITICALsob ataqueransomware
Unauthenticated sensitive information disclosure
100RISCO
abrir ↗
Referência
CVE-2022-26134
CVE-2022-26134CRITICALsob ataqueransomware
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗
Referência
CVE-2023-22518
CVE-2023-22518CRITICALsob ataqueransomware
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz
100RISCO
abrir ↗
Referência
CVE-2021-1498
CVE-2021-1498CRITICALsob ataque
Cisco HyperFlex HX Command Injection Vulnerabilities
100RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2023-27350
CVE-2023-27350CRITICALsob ataqueransomware
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
abrir ↗
Referência
CVE-2023-0669
CVE-2023-0669HIGHsob ataqueransomware
Fortra GoAnywhere MFT License Response Servlet Command Injection
100RISCO
abrir ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
Referência
CVE-2019-0708
CVE-2019-0708CRITICALsob ataqueransomware
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau
100RISCO
abrir ↗
← anteriorpágina 259 / 723próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.