Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
initial-access
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISCO
local
Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
48RISCO
infoleak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
initial-access
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
initial-access
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullN
100RISCO
initial-access
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISCO
initial-access
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
initial-access
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
local
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
76RISCO
initial-access
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
local
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
initial-access
A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7,
56RISCO
initial-access
FOG's authentication bypass leads to full SQL DB dump
68RISCO
initial-access
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited
100RISCO
initial-access
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISCO
remote-with-credentials
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and
100RISCO
initial-access
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 20
100RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
initial-access
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
initial-access
Apache Struts: File upload component had a directory traversal vulnerability
45RISCO
remote-with-credentials
Web Deploy Remote Code Execution Vulnerability
46RISCO
initial-access
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
100RISCO
infoleak
Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA
68RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
local
K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User
33RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.