Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados
32.133CVEs com exploração pública
1.932testados em laboratório
8.156 exploits
VulnCheck XDB
remote-with-credentials
CVE-2025-1094HIGH19 out 2025
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque19 out 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-2812119 out 2025
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s
60RISCO
abrir
VulnCheck XDB
local
CVE-2025-33073HIGHsob ataque18 out 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-27956CRITICAL17 out 2025
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALsob ataque17 out 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
VulnCheck XDB
local
CVE-2017-100036717 out 2025
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RISCO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALsob ataque17 out 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2022-1364HIGHsob ataque16 out 2025
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit
76RISCO
abrir
VulnCheck XDB
local
CVE-2025-24990HIGHsob ataque16 out 2025
Windows Agere Modem Driver Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-53677CRITICAL15 out 2025
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-10271HIGHsob ataqueransomware15 out 2025
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-2476215 out 2025
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISCO
abrir
VulnCheck XDB
local
CVE-2025-11001HIGH15 out 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir
VulnCheck XDB
local
CVE-2025-11001HIGH14 out 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALsob ataque14 out 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-7441CRITICAL14 out 2025
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-48384HIGHsob ataque14 out 2025
Git allows arbitrary code execution through broken config quoting
71RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-4123HIGH14 out 2025
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire
78RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-6554HIGHsob ataque14 out 2025
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
71RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-61884HIGHsob ataqueransomware13 out 2025
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2017-1254213 out 2025
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISCO
abrir
VulnCheck XDB
local
CVE-2023-29360HIGHsob ataque12 out 2025
Microsoft Streaming Service Elevation of Privilege Vulnerability
76RISCO
abrir
VulnCheck XDB
infoleak
CVE-2024-46982HIGH11 out 2025
Cache Poisoning in next.js
53RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-11371HIGHsob ataque11 out 2025
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-5947CRITICAL10 out 2025
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
63RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-2539HIGH10 out 2025
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
56RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-38856HIGHsob ataque10 out 2025
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-61882CRITICALsob ataqueransomware10 out 2025
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2025-49844CRITICAL09 out 2025
Redis Lua Use-After-Free may lead to remote code execution
85RISCO
abrir
anteriorpágina 60 / 272próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.