Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.299 exploits
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via stale global state
100RISCO
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
local
Windows Win32k Elevation of Privilege Vulnerability
100RISCO
initial-access
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This ca
60RISCO
local
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
68RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
denial-of-service
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via OOM corruption
100RISCO
initial-access
RCE via stale global state
100RISCO
denial-of-service
RCE via OOM corruption
100RISCO
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
local
A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interacti
100RISCO
initial-access
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
41RISCO
initial-access
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5
48RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
Integer Overflow or Wraparound in GitLab
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
info-leak
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an
100RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
info-leak
Vite bypasses server.fs.deny when using `?raw??`
70RISCO
initial-access
Plex Media Server arbitrary file write
86RISCO
local
ipv4: validate checksum_start before completing checksum
48RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.