Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
local
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
info-leak
Spring Expression Language property modification using Spring Cloud Gateway Server WebFlux
63RISCO
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
client-side
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire
78RISCO
client-side
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v
76RISCO
client-side
Git allows arbitrary code execution through broken config quoting
71RISCO
initial-access
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISCO
infoleak
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions
100RISCO
initial-access
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISCO
local
Microsoft Streaming Service Elevation of Privilege Vulnerability
76RISCO
infoleak
Cache Poisoning in next.js
53RISCO
initial-access
An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default,
43RISCO
initial-access
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
100RISCO
initial-access
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
63RISCO
initial-access
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
100RISCO
infoleak
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
56RISCO
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISCO
initial-access
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
initial-access
Apache OFBiz: Path traversal leading to RCE
100RISCO
denial-of-service
Redis Lua Use-After-Free may lead to remote code execution
85RISCO
initial-access
Missing Authorization vulnerability in Melis Platform
63RISCO
denial-of-service
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
100RISCO
denial-of-service
Redis Lua Use-After-Free may lead to remote code execution
85RISCO
infoleak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
initial-access
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISCO
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISCO
local
VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)
76RISCO
infoleak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
initial-access
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.