Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.287exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.769Exploit-DB 24.490GitHub PoC 18.551inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
initial-access
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be
60RISCO
local
net/rds: reset op_nents when zerocopy page pin fails
41RISCO
initial-access
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
100RISCO
initial-access
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
initial-access
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
60RISCO
remote-with-credentials
Active Directory Domain Services Elevation of Privilege Vulnerability
100RISCO
initial-access
NGINX ngx_http_rewrite_module vulnerability
60RISCO
info-leak
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
58RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.
50RISCO
initial-access
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
net/rds: reset op_nents when zerocopy page pin fails
41RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
info-leak
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost
58RISCO
local
net/rds: reset op_nents when zerocopy page pin fails
41RISCO
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
initial-access
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
info-leak
Ghost has a SQL Injection in its Content API
85RISCO
initial-access
Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation
68RISCO
initial-access
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem
60RISCO
initial-access
Drupal core - Highly critical - Remote Code Execution
100RISCO
local
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
info-leak
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISCO
initial-access
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
100RISCO
initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
DbGate: Unauthenticated Remote Code Execution via JSON Script Runner
63RISCO
initial-access
Everest Forms <= 3.4.3 - Unauthenticated PHP Object Injection via Form Entry Metadata
63RISCO
denial-of-service
NGINX ngx_http_rewrite_module vulnerability
60RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.