Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.299 exploits
info-leak
n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling
85RISCO
initial-access
WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability
75RISCO
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
initial-access
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
initial-access
SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API
100RISCO
initial-access
Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.
98RISCO
initial-access
Remote Code Execution in fastjson 1.2.68–1.2.83
48RISCO
initial-access
Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
75RISCO
info-leak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
initial-access
Apache OFBiz: Path traversal leading to a RCE
85RISCO
initial-access
Microsoft SharePoint Server Security Feature Bypass Vulnerability
100RISCO
local
Incorrect Authorization in Graphics
71RISCO
initial-access
Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'
48RISCO
initial-access
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
100RISCO
initial-access
Authentication Bypass in the SmartConsole Login Process Using an Application Token
93RISCO
initial-access
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary c
100RISCO
initial-access
Microsoft SharePoint Remote Code Execution Vulnerability
78RISCO
initial-access
vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php
85RISCO
initial-access
SPIP Bigup Multipart File Upload OS Command Injection
85RISCO
info-leak
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1
63RISCO
initial-access
Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation
98RISCO
initial-access
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISCO
initial-access
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
78RISCO
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
initial-access
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
98RISCO
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISCO
remote-with-credentials
Active Directory Certificate Services Elevation of Privilege Vulnerability
41RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
client-side
Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
41RISCO
info-leak
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.