Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

76.107exploits catalogados
34.679CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.692GitHub PoC 13.812VulnCheck XDB 8.460Nuclei 4.233Metasploit 3.467✓ só verificadosrecentespopularesrisco
21.692 exploits
Referência
CVE-2023-34362
CVE-2023-34362CRITICALsob ataqueransomware
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISCO
abrir ↗
Referência
CVE-2023-34362
CVE-2023-34362CRITICALsob ataqueransomware
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.
100RISCO
abrir ↗
Referência
CVE-2026-65710
CVE-2026-65710HIGH
sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption
41RISCO
abrir ↗
Referência
CVE-2021-1497
CVE-2021-1497CRITICALsob ataque
Cisco HyperFlex HX Command Injection Vulnerabilities
100RISCO
abrir ↗
Referência
CVE-2022-29303
CVE-2022-29303CRITICALsob ataque
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
100RISCO
abrir ↗
Referência
CVE-2019-3396
CVE-2019-3396CRITICALsob ataqueransomware
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RISCO
abrir ↗
Referência
CVE-2019-3396
CVE-2019-3396CRITICALsob ataqueransomware
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RISCO
abrir ↗
Referência
CVE-2019-3396
CVE-2019-3396CRITICALsob ataqueransomware
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RISCO
abrir ↗
Referência
CVE-2018-0296
CVE-2018-0296HIGHsob ataque
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo
100RISCO
abrir ↗
Referência
CVE-2018-0296
CVE-2018-0296HIGHsob ataque
A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remo
100RISCO
abrir ↗
Referência
CVE-2021-22986
CVE-2021-22986CRITICALsob ataqueransomware
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RISCO
abrir ↗
Referência
CVE-2021-22986
CVE-2021-22986CRITICALsob ataqueransomware
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-1653
CVE-2019-1653HIGHsob ataque
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
100RISCO
abrir ↗
Referência
CVE-2021-33044
CVE-2021-33044CRITICALsob ataque
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by
100RISCO
abrir ↗
Referência
CVE-2021-36260
CVE-2021-36260CRITICALsob ataque
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
Referência
CVE-2021-36260
CVE-2021-36260CRITICALsob ataque
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗
Referência
CVE-2020-13379
CVE-2020-13379—
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows
60RISCO
abrir ↗
Referência
CVE-2023-0600
CVE-2023-0600CRITICAL
WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
63RISCO
abrir ↗
Referência
CVE-2017-8917
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗
Referência
CVE-2017-8917
CVE-2017-8917—
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
abrir ↗
Referência
CVE-2017-7269
CVE-2017-7269CRITICALsob ataque
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in
100RISCO
abrir ↗
Referência
CVE-2025-34103
CVE-2025-34103CRITICAL
WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi
63RISCO
abrir ↗
Referência
CVE-2023-21839
CVE-2023-21839HIGHsob ataque
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t
100RISCO
abrir ↗
Referência
CVE-2022-1040
CVE-2022-1040CRITICALsob ataque
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sopho
100RISCO
abrir ↗
Referência
CVE-2020-7961
CVE-2020-7961CRITICALsob ataque
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir ↗
Referência
CVE-2020-7961
CVE-2020-7961CRITICALsob ataque
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir ↗
Referência
CVE-2021-31207
CVE-2021-31207MEDIUMsob ataqueransomware
Microsoft Exchange Server Security Feature Bypass Vulnerability
100RISCO
abrir ↗
Referência
CVE-2019-15107
CVE-2019-15107CRITICALsob ataqueransomware
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗
Referência
CVE-2019-15107
CVE-2019-15107CRITICALsob ataqueransomware
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗
← anteriorpágina 289 / 724próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.