Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
infoleak
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Se
100RISCO
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
infoleak
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
infoleak
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
60RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
infoleak
Fusion Builder < 3.6.2 - Unauthenticated SSRF
60RISCO
initial-access
20RISCO
infoleak
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
43RISCO
initial-access
20RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
info-leak
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
43RISCO
local
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
initial-access
35RISCO
initial-access
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISCO
remote-with-credentials
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code
48RISCO
initial-access
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute
60RISCO
local
Openssh: regresshion - race condition in ssh allows rce/dos
63RISCO
remote-with-credentials
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman
60RISCO
initial-access
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISCO
client-side
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside
83RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
initial-access
20RISCO
client-side
Git allows arbitrary code execution through broken config quoting
71RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.