Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.299 exploits
info-leak
Authorization Bypass in Next.js Middleware
85RISCO
denial-of-service
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a
76RISCO
initial-access
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote
100RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
info-leak
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
100RISCO
initial-access
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'
48RISCO
local
Incorrect Authorization in Graphics
71RISCO
initial-access
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
100RISCO
initial-access
marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass
100RISCO
local
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege
100RISCO
initial-access
Undisclosed RCE in Zammad v6.3 and higher
83RISCO
info-leak
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Soft
100RISCO
initial-access
TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
63RISCO
initial-access
Samba: samba: remote code execution in printing subsystem via unescaped job description
68RISCO
info-leak
[20230201] - Core - Improper access check in webservice endpoints
100RISCO
initial-access
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F
100RISCO
info-leak
Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
68RISCO
initial-access
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
initial-access
An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 an
100RISCO
initial-access
Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection
63RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values
63RISCO
initial-access
Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values
63RISCO
local
Incorrect Authorization in Graphics
71RISCO
initial-access
vCenter directory-traversal vulnerability
90RISCO
local
Incorrect Authorization in Graphics
71RISCO
client-side
WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter
33RISCO
initial-access
Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values
63RISCO
initial-access
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
63RISCO
initial-access
Gotenberg vulnerable to argument injection via newlines in ExifTool metadata values
63RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.