Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.760exploits catalogados
32.083CVEs com exploração pública
1.932testados em laboratório
8.150 exploits
VulnCheck XDB
infoleak
CVE-2024-23897CRITICALsob ataqueransomware24 jul 2025
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-6558HIGHsob ataque24 jul 2025
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote at
71RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-5777CRITICALsob ataqueransomware24 jul 2025
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware24 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-1302CRITICAL24 jul 2025
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input
68RISCO
abrir
VulnCheck XDB
infoleak
CVE-2018-1171423 jul 2025
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00
35RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware23 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-29927CRITICAL23 jul 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-45046CRITICALsob ataqueransomware23 jul 2025
Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-4288923 jul 2025
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
60RISCO
abrir
VulnCheck XDB
infoleak
CVE-2017-12637HIGHsob ataque23 jul 2025
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Se
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-27363HIGHsob ataque23 jul 2025
An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when
76RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-4947CRITICALsob ataque23 jul 2025
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside
83RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32756CRITICALsob ataque23 jul 2025
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCa
90RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-4577CRITICALsob ataqueransomware23 jul 2025
Argument Injection in PHP-CGI
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2023-44487HIGHsob ataque23 jul 2025
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware23 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-53770CRITICALsob ataqueransomware23 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware22 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-3408522 jul 2025
35RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-3408522 jul 2025
35RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-282522 jul 2025
35RISCO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALsob ataque22 jul 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware22 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2019-713922 jul 2025
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
43RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-120722 jul 2025
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2018-120722 jul 2025
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware22 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2022-138622 jul 2025
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-53770CRITICALsob ataqueransomware22 jul 2025
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir
anteriorpágina 71 / 272próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.