Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.902exploits catalogados

34.597CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.624GitHub PoC 13.727VulnCheck XDB 8.410Nuclei 4.231Metasploit 3.467✓ só verificadosrecentes populares risco

21.624 exploits

Referência

CVE-2020-0688

CVE-2020-0688HIGHsob ataqueransomware

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

Referência

CVE-2020-0688

CVE-2020-0688HIGHsob ataqueransomware

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2021-42013

CVE-2021-42013CRITICALsob ataqueransomware

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)

100RISCO

Referência

CVE-2026-7293

CVE-2026-7293MEDIUM

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection

33RISCO

Referência

CVE-2022-41082

CVE-2022-41082HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

Referência

CVE-2025-59287

CVE-2025-59287CRITICALsob ataque

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

100RISCO

Referência

CVE-2019-10149

CVE-2019-10149CRITICALsob ataque

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message(

100RISCO

Referência

CVE-2018-15961

CVE-2018-15961CRITICALsob ataque

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unr

100RISCO

Referência

CVE-2023-38035

CVE-2023-38035CRITICALsob ataqueransomware

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an

100RISCO

Referência

CVE-2021-27065

CVE-2021-27065HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

Referência

CVE-2021-27065

CVE-2021-27065HIGHsob ataqueransomware

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

Referência

CVE-2025-24813

CVE-2025-24813CRITICALsob ataque

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

Referência

CVE-2022-41040

CVE-2022-41040HIGHsob ataqueransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability

100RISCO

Referência

CVE-2021-3129

CVE-2021-3129CRITICALsob ataqueransomware

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

Referência

CVE-2021-3129

CVE-2021-3129CRITICALsob ataqueransomware

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitra

100RISCO

Referência

CVE-2020-10189

CVE-2020-10189CRITICALsob ataque

Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted d

100RISCO

Referência

CVE-2026-7292

CVE-2026-7292MEDIUM

o2oa NodeAgent NodeAgent.java syncFile improper authorization

33RISCO

Referência

CVE-2026-7290

CVE-2026-7290MEDIUM

JeecgBoot loadDict Endpoint SqlInjectionUtil.java SqlInjectionUtil sql injection

33RISCO

Referência

CVE-2026-7289

CVE-2026-7289HIGH

D-Link DIR-825M formWanConfigSetup sub_414BA8 buffer overflow

41RISCO

Referência

CVE-2022-35405

CVE-2022-35405CRITICALsob ataque

Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code

100RISCO

Referência

CVE-2026-7288

CVE-2026-7288HIGH

D-Link DIR-825M formVpnConfigSetup sub_4151FC buffer overflow

41RISCO

Referência

CVE-2026-7283

CVE-2026-7283MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection

33RISCO

Referência

CVE-2026-27760

CVE-2026-27760CRITICAL

OpenCATS PHP Code Injection via installer AJAX endpoint

68RISCO

Referência

CVE-2026-7282

CVE-2026-7282MEDIUM

SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection

33RISCO

Referência

CVE-2026-7281

CVE-2026-7281MEDIUM

SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting

33RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.