Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.287exploits catalogados
41.245CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.769Exploit-DB 24.490GitHub PoC 18.551inteligência de exploração 11.309Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
11.309 exploits
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
initial-access
LiteLLM: SQL injection in Proxy API key verification
100RISCO
initial-access
WebPros cPanel and WHM Authentication Bypass via Login Flow
100RISCO
initial-access
Breeze Cache <= 2.4.4 - Unauthenticated Arbitrary File Upload via fetch_gravatar_from_remote
68RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
initial-access
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
78RISCO
info-leak
LiteLLM: SQL injection in Proxy API key verification
100RISCO
info-leak
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
60RISCO
initial-access
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitra
100RISCO
info-leak
Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection
56RISCO
initial-access
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
xfrm: esp: avoid in-place decrypt on shared skb frags
78RISCO
client-side
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow
71RISCO
initial-access
When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomc
100RISCO
initial-access
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
56RISCO
initial-access
Unauthenticated arbitrary file read and remote code execution in CrushFTP
100RISCO
info-leak
Kyocera Net View Address Book Exposure
61RISCO
client-side
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
local
crypto: algif_aead - Revert to operating out-of-place
100RISCO
Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.