Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.340exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.769Exploit-DB 24.491GitHub PoC 18.603inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
local
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
local
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISCO
client-side
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa
41RISCO
initial-access
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell
100RISCO
remote-with-credentials
XWiki Platform: Remote code execution as guest via DatabaseSearch
75RISCO
infoleak
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experi
60RISCO
initial-access
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
100RISCO
denial-of-service
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
35RISCO
local
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISCO
denial-of-service
A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated atta
45RISCO
initial-access
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t
100RISCO
initial-access
Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
100RISCO
initial-access
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
infoleak
mod_proxy SSRF
100RISCO
client-side
Git allows arbitrary code execution through broken config quoting
71RISCO
infoleak
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
85RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
client-side
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitra
83RISCO
client-side
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
55RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
initial-access
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
client-side
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
client-side
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
75RISCO
initial-access
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).
100RISCO
local
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
initial-access
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers
75RISCO
initial-access
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.