Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.589exploits catalogados
34.508CVEs com exploração pública
24.695testados em laboratório
8.213 exploits
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware06 jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware05 jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware05 jul 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-29464CRITICALsob ataqueransomware05 jul 2022
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque04 jul 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware04 jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware01 jul 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir
VulnCheck XDB
local
CVE-2022-0847HIGHsob ataque30 jun 2022
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-42237CRITICALsob ataqueransomware30 jun 2022
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-30190HIGHsob ataqueransomware29 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-34473CRITICALsob ataqueransomware29 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2019-9670CRITICALsob ataque28 jun 2022
mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XX
100RISCO
abrir
VulnCheck XDB
local
CVE-2015-2291HIGHsob ataqueransomware28 jun 2022
(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all
71RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALsob ataqueransomware27 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-30190HIGHsob ataqueransomware27 jun 2022
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-2821926 jun 2022
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote
60RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2021-2500326 jun 2022
WPCargo < 6.9.0 - Unauthenticated RCE
50RISCO
abrir
VulnCheck XDB
initial-access
CVE-2015-553126 jun 2022
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unsp
60RISCO
abrir
VulnCheck XDB
local
CVE-2021-21551HIGHsob ataque25 jun 2022
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
98RISCO
abrir
VulnCheck XDB
local
CVE-2021-3156HIGHsob ataque24 jun 2022
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
abrir
VulnCheck XDB
local
CVE-2021-34527HIGHsob ataqueransomware24 jun 2022
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2020-3580MEDIUMsob ataqueransomware24 jun 2022
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-26855CRITICALsob ataqueransomware24 jun 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2014-6271CRITICALsob ataque23 jun 2022
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-22005CRITICALsob ataqueransomware21 jun 2022
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-4642220 jun 2022
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-1388CRITICALsob ataqueransomware20 jun 2022
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-26134CRITICALsob ataqueransomware19 jun 2022
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2023-30799CRITICAL19 jun 2022
MikroTik RouterOS Administrator Privilege Escalation
48RISCO
abrir
VulnCheck XDB
infoleak
CVE-2021-41773HIGHsob ataqueransomware17 jun 2022
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir
anteriorpágina 185 / 274próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.