Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.299 exploits
initial-access
RCE via OOM corruption
100RISCO
initial-access
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISCO
denial-of-service
RCE via OOM corruption
100RISCO
info-leak
Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio
56RISCO
client-side
URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter
48RISCO
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
initial-access
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52
48RISCO
initial-access
Windows Netlogon Remote Code Execution Vulnerability
70RISCO
remote-with-credentials
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable param
56RISCO
initial-access
Laravel TokenGuard authentication bypass through non-string API credentials
63RISCO
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
initial-access
anji-plus AJ-Report Authentication Bypass
75RISCO
remote-with-credentials
TOTOLINK X2000R formWsc command injection
38RISCO
denial-of-service
HTTP Protocol Stack Remote Code Execution Vulnerability
100RISCO
local
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
initial-access
RCE via stale global state
100RISCO
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
initial-access
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
remote-with-credentials
Integer Overflow or Wraparound in GitLab
100RISCO
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
denial-of-service
Out-of-Bounds Write in Google Brotli Decoder
70RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before
48RISCO
initial-access
RCE via stale global state
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.