Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.305exploits catalogados
36.465CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentespopularesrisco
24.466 exploits
Exploit-DB
Linux Kernel proc_readdir_de() 6.18-rc5 - Local Privilege Escalation
fs/proc: fix uaf in proc_readdir_de()
41RISCO
abrir ↗Exploit-DB
Linux nf_tables 6.19.3 - Local Privilege Escalation
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
41RISCO
abrir ↗Exploit-DB
Linksys E1200 2.0.04 - Authenticated Stack Buffer Overflow (RCE)
A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (F
41RISCO
abrir ↗Exploit-DB
Python-Multipart 0.0.22 - Path Traversal
Python-Multipart has Arbitrary File Write via Non-Default Configuration
41RISCO
abrir ↗Exploit-DB
HUSTOJ Zip-Slip v26.01.24 - RCE
HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE
63RISCO
abrir ↗Exploit-DB
JUNG Smart Visu Server 1.1.1050 - Dos
JUNG Smart Visu Server 1.1.1050 - 'JUNG Smart Visu Server' Missing Authentication
41RISCO
abrir ↗Exploit-DB
Frigate NVR 0.16.3 - Remote Code Execution
Frigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape
48RISCO
abrir ↗Exploit-DB
FUXA 1.2.8 - Authentication Bypass + RCE Exploit
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnera
48RISCO
abrir ↗Exploit-DB
Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside
76RISCO
abrir ↗Exploit-DB
Js2Py 0.74 - RCE
An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a
48RISCO
abrir ↗Exploit-DB
Camaleon CMS v2.9.0 - Path Traversal
Arbitrary path traversal in Camaleon CMS
61RISCO
abrir ↗Exploit-DB
Windows 11 23H2 - Denial of Service (DoS)
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
41RISCO
abrir ↗Exploit-DB
Erugo 0.2.14 - Remote Code Execution (RCE)
Authenticated Remote Code Execution via Arbitrary File Upload
48RISCO
abrir ↗Exploit-DB
deephas 1.0.7 - Prototype Pollution
deepHas vulnerable to Prototype Pollution via constructor.prototype
48RISCO
abrir ↗Exploit-DB
Repetier-Server 1.4.10 - Path Traversal
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE
48RISCO
abrir ↗Exploit-DB
BusyBox 1.37.0 - Path Traversal
Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization
41RISCO
abrir ↗Exploit-DB
SUSE Manager 4.3.15 - Code Execution
SUSE Multi Linux Manager allows code execution via unprotected websocket endpoint
53RISCO
abrir ↗Exploit-DB
SumatraPDF 3.5.2 - Remote Code Execution
SumatraPDF Update MITM -> Arbitrary Code Execution
41RISCO
abrir ↗Exploit-DB
NiceGUI 3.6.1 - Path Traversal
NiceGUI's Path Traversal via Unsanitized FileUpload.name Enables Arbitrary File Write
41RISCO
abrir ↗Exploit-DB
Windows 11 25H2 - Heap Overflow
Windows Hyper-V Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
Windows 11 25H2 - Heap Overflow
Windows Hyper-V Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
Fedora - Local Privilege Escalation
Abrt: command-injection in abrt leading to local privilege escalation
41RISCO
abrir ↗Exploit-DB
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
Open eClass has Unrestricted File Upload that Leads to Remote Code Execution (RCE)
41RISCO
abrir ↗Exploit-DB
GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
abrir ↗Exploit-DB
Atlona ATOMERX21 - Authenticated Command Injection
/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary comm
33RISCO
abrir ↗Exploit-DB
LangChain Core 1.2.4 - SSTI/RCE
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
60RISCO
abrir ↗Exploit-DB
HAX CMS 24.x - Stored Cross-Site Scripting (XSS)
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
41RISCO
abrir ↗Exploit-DB
FacturaScripts 2025.43 - XSS
FacturaScripts vulnerable to Stored Cross-Site Scripting (XSS) via XML File Upload
28RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.