Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
infoleak
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.htm
75RISCO
infoleak
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
client-side
Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, do not restrict the contents of
60RISCO
local
Double Free in net/packet/af_packet.c leading to priviledge escalation
63RISCO
initial-access
The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from vers
100RISCO
infoleak
GLPI allows unauthenticated SQL injection through the inventory endpoint
78RISCO
initial-access
Improper limitation of a pathname to a restricted directory (“path traversal”)
100RISCO
initial-access
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISCO
initial-access
Authentication bypass using an alternate path or channel
100RISCO
remote-with-credentials
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code e
100RISCO
initial-access
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in
60RISCO
initial-access
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
client-side
Git allows arbitrary code execution through broken config quoting
71RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
infoleak
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
local
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use aft
71RISCO
client-side
Git allows arbitrary code execution through broken config quoting
71RISCO
local
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
initial-access
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and
100RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
client-side
Path traversal vulnerability in WinRAR
93RISCO
client-side
A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire
78RISCO
infoleak
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
local
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
infoleak
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp
100RISCO
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.