Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

78.794exploits catalogados
36.057CVEs com exploração pública
24.695testados em laboratório
8.829 exploits
VulnCheck XDB
initial-access
CVE-2024-28000CRITICAL30 jul 2026
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
75RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-60004CRITICAL30 jul 2026
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-66066CRITICAL29 jul 2026
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
68RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-36104CRITICAL29 jul 2026
Apache OFBiz: Path traversal leading to a RCE
85RISCO
abrir
VulnCheck XDB
info-leak
CVE-2021-41773HIGHsob ataqueransomware29 jul 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-21479HIGHsob ataque28 jul 2026
Incorrect Authorization in Graphics
71RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-8206CRITICAL28 jul 2026
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'
48RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-28987CRITICALsob ataque28 jul 2026
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-61511CRITICAL28 jul 2026
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-55040CRITICALsob ataque28 jul 2026
Microsoft SharePoint Server Security Feature Bypass Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-9198CRITICALsob ataque28 jul 2026
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-7961CRITICALsob ataque28 jul 2026
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-16232CRITICALsob ataque28 jul 2026
Authentication Bypass in the SmartConsole Login Process Using an Application Token
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-50522CRITICALsob ataque28 jul 2026
Microsoft SharePoint Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2021-41773HIGHsob ataqueransomware27 jul 2026
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware27 jul 2026
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-63030CRITICALsob ataque27 jul 2026
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-60137MEDIUMsob ataque27 jul 2026
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2023-52076HIGH27 jul 2026
Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
41RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-63030CRITICALsob ataque27 jul 2026
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-41940CRITICALsob ataqueransomware26 jul 2026
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2021-44228CRITICALsob ataqueransomware26 jul 2026
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-60137MEDIUMsob ataque26 jul 2026
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-58644CRITICALsob ataque26 jul 2026
Microsoft SharePoint Remote Code Execution Vulnerability
78RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-15981CRITICAL26 jul 2026
SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter
48RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-50522CRITICALsob ataque25 jul 2026
Microsoft SharePoint Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-24061CRITICALsob ataque25 jul 2026
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir
VulnCheck XDB
local
CVE-2022-38181HIGHsob ataque25 jul 2026
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishan
76RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-9198CRITICALsob ataque24 jul 2026
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2026-9198CRITICALsob ataque24 jul 2026
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
100RISCO
abrir

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.