Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.291exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
11.309 exploits
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
info-leak
CVE-2023-28121—30 abr 2026
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s
60RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
remote-with-credentials
CVE-2025-8110HIGHsob ataque30 abr 2026
File overwrite in file update API in Gogs
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
info-leak
CVE-2026-32202MEDIUMsob ataque30 abr 2026
Windows Shell Spoofing Vulnerability
85RISCO
initial-access
CVE-2025-32432CRITICALsob ataque30 abr 2026
Craft CMS Allows Remote Code Execution
100RISCO
initial-access
CVE-2026-3844CRITICAL30 abr 2026
Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote
68RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque30 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque29 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque29 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
CVE-2026-31431HIGHsob ataque29 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
info-leak
CVE-2024-8503CRITICAL29 abr 2026
VICIdial Unauthenticated SQL Injection
85RISCO
local
CVE-2026-31431HIGHsob ataque29 abr 2026
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
CVE-2024-4577CRITICALsob ataqueransomware29 abr 2026
Argument Injection in PHP-CGI
100RISCO
local
CVE-2021-4034HIGHsob ataqueransomware28 abr 2026
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
initial-access
CVE-2021-44228CRITICALsob ataqueransomware28 abr 2026
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
initial-access
CVE-2026-42208CRITICALsob ataque28 abr 2026
LiteLLM: SQL injection in Proxy API key verification
100RISCO
initial-access
CVE-2026-42167HIGH28 abr 2026
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where th
56RISCO
initial-access
CVE-2018-7600CRITICALsob ataqueransomware27 abr 2026
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
← anteriorpágina 87 / 377próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.