Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

79.230exploits catalogados

36.424CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.465Referência 23.022GitHub PoC 15.031VulnCheck XDB 8.860Nuclei 4.361Metasploit 3.491✓ só verificadosrecentes populares risco

4.361 exploits

Nucleicritical

XStream < 1.4.16 - Remote Code Execution

CVE-2021-21345MEDIUM

XStream is vulnerable to a Remote Command Execution attack

50RISCO

abrir ↗

Nucleicritical

Oracle WebLogic Server - Remote Code Execution

CVE-2021-2135CRITICAL

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Suppor

43RISCO

abrir ↗

Nucleicritical

XStream <1.4.16 - Remote Code Execution

CVE-2021-21351MEDIUM

XStream is vulnerable to an Arbitrary Code Execution attack

50RISCO

abrir ↗

Nucleihigh

BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution

CVE-2021-21389HIGH

BuddyPress privilege escalation via REST API

61RISCO

abrir ↗

Nucleimedium

Jellyfin <10.7.0 - Local File Inclusion

CVE-2021-21402HIGH

Unauthenticated Arbitrary File Access in Jellyfin

78RISCO

abrir ↗

Nucleicritical

SCIMono <0.0.19 - Remote Code Execution

CVE-2021-21479HIGH

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availabi

41RISCO

abrir ↗

Nucleimedium

ZTE MF971R - Referer authentication bypass

CVE-2021-21745—

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use th

30RISCO

abrir ↗

Nucleimedium

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

CVE-2021-21799CRITICAL

Cross-site scripting vulnerabilities exist in the telnet_form.php script functionality of Advantech R-SeeNet v 2.4.12 (2

48RISCO

abrir ↗

Nucleimedium

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

CVE-2021-21800CRITICAL

Cross-site scripting vulnerabilities exist in the ssh_form.php script functionality of Advantech R-SeeNet v 2.4.12 (20.1

48RISCO

abrir ↗

Nucleimedium

Advantech R-SeeNet - Cross-Site Scripting

CVE-2021-21801CRITICAL

This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application

55RISCO

abrir ↗

Nucleimedium

Advantech R-SeeNet - Cross-Site Scripting

CVE-2021-21802CRITICAL

This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application

43RISCO

abrir ↗

Nucleimedium

Advantech R-SeeNet - Cross-Site Scripting

CVE-2021-21803CRITICAL

This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web application

43RISCO

abrir ↗

Nucleicritical

Advantech R-SeeNet 2.4.12 - OS Command Injection

CVE-2021-21805CRITICAL

An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.

55RISCO

abrir ↗

Nucleimedium

D-Link DIR-3040 1.13B03 - Information Disclosure

CVE-2021-21816MEDIUM

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially craft

40RISCO

abrir ↗

Nucleicritical

Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection

CVE-2021-21881CRITICAL

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Prem

55RISCO

abrir ↗

Nucleicritical

VMware vSphere Client (HTML5) - Remote Code Execution

CVE-2021-21972CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

100RISCO

abrir ↗

Nucleimedium

VMware vSphere - Server-Side Request Forgery

CVE-2021-21973MEDIUMsob ataque

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of UR

100RISCO

abrir ↗

Nucleihigh

vRealize Operations Manager API - Server-Side Request Forgery

CVE-2021-21975HIGHsob ataqueransomware

Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor

100RISCO

abrir ↗

Nucleicritical

VMware View Planner <4.6 SP1- Remote Code Execution

CVE-2021-21978—

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input val

60RISCO

abrir ↗

Nucleicritical

VMware vSphere Client (HTML5) - Remote Code Execution

CVE-2021-21985CRITICALsob ataqueransomware

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

100RISCO

abrir ↗

Nucleicritical

VMware vCenter Server - Arbitrary File Upload

CVE-2021-22005CRITICALsob ataqueransomware

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

100RISCO

abrir ↗

Nucleimedium

vCenter Server - Improper Access Control

CVE-2021-22017MEDIUMsob ataque

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A mali

70RISCO

abrir ↗

Nucleihigh

Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution

CVE-2021-22053—

Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to exe

23RISCO

abrir ↗

Nucleihigh

VMWare Workspace ONE UEM - Server-Side Request Forgery

CVE-2021-22054HIGHsob ataque

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

100RISCO

abrir ↗

Nucleimedium

FortiWeb - Cross Site Scripting

CVE-2021-22122—

An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version

23RISCO

abrir ↗

Nucleimedium

Elasticsearch 7.10.0-7.13.3 - Information Disclosure

CVE-2021-22145—

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the abil

60RISCO

abrir ↗

Nucleihigh

GitLab CI Lint API - Server-Side Request Forgery

CVE-2021-22175MEDIUMsob ataque

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af

70RISCO

abrir ↗

Nucleicritical

GitLab CE/EE - Remote Code Execution

CVE-2021-22205CRITICALsob ataqueransomware

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validati

100RISCO

abrir ↗

Nucleihigh

Gitlab CE/EE 10.5 - Server-Side Request Forgery

CVE-2021-22214MEDIUM

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE

53RISCO

abrir ↗

Nucleicritical

Micro Focus Operations Bridge Reporter - Remote Code Execution

CVE-2021-22502CRITICALsob ataque

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.