Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.340exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.769Exploit-DB 24.491GitHub PoC 18.603inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
client-side
MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting
56RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
client-side
MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting
56RISCO
remote-with-credentials
File overwrite in file update API in Gogs
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
client-side
Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting
56RISCO
local
Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap
46RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
local
Windows Kernel Elevation of Privilege Vulnerability
71RISCO
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
initial-access
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
initial-access
Livewire vulnerable to remote command execution during property update hydration
100RISCO
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
initial-access
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
remote-with-credentials
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
initial-access
Authentication Bypass and RCE in man-group/dtale
85RISCO
infoleak
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can by
100RISCO
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.