Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
initial-access
Apache Camel: Camel Message Header Injection through request parameters
55RISCO
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
client-side
@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers
75RISCO
infoleak
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re
100RISCO
infoleak
WordPress Core < 6.2.1 - Directory Traversal
70RISCO
initial-access
Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability
68RISCO
initial-access
Dataease H2 Database Remote Code Execution (RCE) Bypass Vulnerability
68RISCO
local
Path traversal vulnerability in WinRAR
93RISCO
initial-access
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
denial-of-service
HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an
100RISCO
remote-with-credentials
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
78RISCO
initial-access
An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s
60RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
local
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
initial-access
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RISCO
local
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_
23RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
infoleak
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
client-side
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit
76RISCO
local
Windows Agere Modem Driver Elevation of Privilege Vulnerability
71RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
initial-access
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
initial-access
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISCO
initial-access
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISCO
local
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.