Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
infoleak
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file up
100RISCO
infoleak
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
100RISCO
infoleak
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and
100RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISCO
infoleak
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISCO
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
infoleak
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
initial-access
WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability
85RISCO
initial-access
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
initial-access
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attacke
60RISCO
initial-access
TP-LINK Tapo C200 remote code execution vulnerability
70RISCO
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
initial-access
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISCO
initial-access
GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not
50RISCO
infoleak
Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows
61RISCO
initial-access
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs cla
100RISCO
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
initial-access
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
68RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Weak Password Recovery Mechanism for Forgotten Password in GitLab
100RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
denial-of-service
Synapse vulnerable to federation denial of service via malformed events
41RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.