Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.299 exploits
info-leak
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
initial-access
RCE via OOM corruption
100RISCO
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
initial-access
RCE via OOM corruption
100RISCO
remote-with-credentials
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenti
60RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
Adobe ColdFusion Improper Access Control Arbitrary code execution
100RISCO
remote-with-credentials
s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter
48RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running In
48RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
RCE via stale global state
100RISCO
initial-access
RCE via stale global state
100RISCO
initial-access
RCE via stale global state
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via stale global state
100RISCO
initial-access
RCE via stale global state
100RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
initial-access
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
initial-access
Totolink A7000R cstecgi.cgi setUpgradeFW command injection
33RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
initial-access
Gitea Org-mode file disclosure and code execution
68RISCO
initial-access
WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution
71RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
OS Command Injection in Barracuda Appliances
71RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
93RISCO
initial-access
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.