Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.287exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.769Exploit-DB 24.490GitHub PoC 18.551inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
local
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
78RISCO
info-leak
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
100RISCO
local
net: skbuff: preserve shared-frag marker during coalescing
91RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment
100RISCO
initial-access
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
info-leak
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
100RISCO
local
Use-after-free in Linux kernel's netfilter: nf_tables component
76RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
initial-access
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
85RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
initial-access
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execut
100RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
local
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privilege
83RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
initial-access
REC in MCPJam inspector due to HTTP Endpoint exposes
75RISCO
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISCO
initial-access
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui
100RISCO
info-leak
OrderConvo <= 15.1 - Unauthenticated Arbitrary File Read
56RISCO
initial-access
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISCO
initial-access
WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action
68RISCO
initial-access
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RISCO
initial-access
Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection
63RISCO
initial-access
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
63RISCO
local
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
71RISCO
initial-access
LiteLLM: SQL injection in Proxy API key verification
100RISCO
local
net/rds: reset op_nents when zerocopy page pin fails
41RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.