Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.426exploits catalogados
41.291CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.792Exploit-DB 24.491GitHub PoC 18.666inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
100RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
100RISCO
initial-access
SysAid On-Prem <= 23.3.40 lshw Proceessing XML External Entity Injection
85RISCO
initial-access
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RISCO
infoleak
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
infoleak
Nexus Repository 3 - Path Traversal
61RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
client-side
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
infoleak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
client-side
Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account take
53RISCO
infoleak
Authorization Bypass in Next.js Middleware
85RISCO
info-leak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
infoleak
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
client-side
NTLM Hash Disclosure Spoofing Vulnerability
75RISCO
initial-access
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
ingress-nginx admission controller RCE escalation
85RISCO
initial-access
Authorization Bypass in Next.js Middleware
85RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.