Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

84.002exploits catalogados
39.526CVEs com exploração pública
24.695testados em laboratório
9.636 exploits
VulnCheck XDB
initial-access
CVE-2026-49049HIGH08 out 2026
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
56RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-5430CRITICALsob ataque08 out 2026
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
78RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-5430CRITICALsob ataque08 out 2026
Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover
78RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-48907CRITICALsob ataque08 out 2026
Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5
98RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-7600CRITICALsob ataqueransomware08 out 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2018-1000861CRITICALsob ataque08 out 2026
A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and ea
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-48908CRITICALsob ataque08 out 2026
Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-17564—08 out 2026
Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST
50RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL08 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALsob ataque08 out 2026
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2010-2861HIGHsob ataqueransomware08 out 2026
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-12149CRITICALsob ataqueransomware08 out 2026
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware08 out 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
VulnCheck XDB
local
CVE-2019-2215HIGHsob ataque07 out 2026
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-10520CRITICALsob ataque07 out 2026
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote
100RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-23744CRITICAL07 out 2026
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-87902HIGHsob ataque07 out 2026
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.ph
98RISCO
abrir ↗
VulnCheck XDB
local
CVE-2022-0185HIGHsob ataque07 out 2026
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functio
76RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2025-29927CRITICAL07 out 2026
Authorization Bypass in Next.js Middleware
85RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-24061CRITICALsob ataque07 out 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL07 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
denial-of-service
CVE-2024-7971HIGHsob ataque07 out 2026
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a
76RISCO
abrir ↗
VulnCheck XDB
local
CVE-2025-21479HIGHsob ataque06 out 2026
Incorrect Authorization in Graphics
71RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2026-102489HIGHsob ataque06 out 2026
Undisclosed RCE in Zammad v6.3 and higher
71RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL06 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗
VulnCheck XDB
info-leak
CVE-2026-21589CRITICAL06 out 2026
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
63RISCO
abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.