Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.340exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
11.309 exploits
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2024-7954CRITICAL11 dez 2025
SPIP porte_plume Plugin Arbitrary PHP Execution
85RISCO
initial-access
CVE-2022-22965CRITICALsob ataque11 dez 2025
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
remote-with-credentials
CVE-2025-8110HIGHsob ataque11 dez 2025
File overwrite in file update API in Gogs
100RISCO
initial-access
CVE-2013-0156—11 dez 2025
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, an
60RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-53558HIGH11 dez 2025
ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge o
56RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
infoleak
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2020-1938CRITICALsob ataque11 dez 2025
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware11 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
remote-with-credentials
CVE-2025-53772HIGH10 dez 2025
Web Deploy Remote Code Execution Vulnerability
46RISCO
initial-access
CVE-2025-24813CRITICALsob ataque10 dez 2025
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
remote-with-credentials
CVE-2025-53772HIGH10 dez 2025
Web Deploy Remote Code Execution Vulnerability
46RISCO
initial-access
CVE-2020-14882CRITICALsob ataque10 dez 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
← anteriorpágina 113 / 377próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.