Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.340exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
11.309 exploits
initial-access
CVE-2025-55182CRITICALsob ataqueransomware13 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware13 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware12 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
infoleak
CVE-2025-58360HIGHsob ataque12 dez 2025
GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
98RISCO
denial-of-service
CVE-2025-55184HIGH12 dez 2025
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 1
68RISCO
denial-of-service
CVE-2025-55184HIGH12 dez 2025
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 1
68RISCO
denial-of-service
CVE-2025-55184HIGH12 dez 2025
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 1
68RISCO
denial-of-service
CVE-2025-55184HIGH12 dez 2025
A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 1
68RISCO
initial-access
CVE-2019-11043HIGHsob ataqueransomware12 dez 2025
Underflow in PHP-FPM can lead to RCE
100RISCO
client-side
CVE-2025-11001HIGH12 dez 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-34299CRITICAL11 dez 2025
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISCO
remote-with-credentials
CVE-2025-8110HIGHsob ataque11 dez 2025
File overwrite in file update API in Gogs
100RISCO
← anteriorpágina 112 / 377próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.