Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
79.305exploits catalogados
36.465CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.466Referência 23.051GitHub PoC 15.051VulnCheck XDB 8.883Nuclei 4.361Metasploit 3.493✓ só verificadosrecentespopularesrisco
24.466 exploits
Exploit-DB
MikroTik RouterOS 7.19.1 - Reflected XSS
Cross-site scripting via dst parameter in RouterOS WiFi hotspot
33RISCO
abrir ↗Exploit-DB
Langflow 1.2.x - Remote Code Execution (RCE)
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
abrir ↗Exploit-DB
Microsoft Brokering File System Windows 11 Version 22H2 - Elevation of Privilege
Microsoft Brokering File System Elevation of Privilege Vulnerability
41RISCO
abrir ↗Exploit-DB
NodeJS 24.x - Path Traversal
An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CO
46RISCO
abrir ↗Exploit-DB
WP Publications WordPress Plugin 1.2 - Stored XSS
WP Publications <= 1.2 - Admin+ Stored XSS
33RISCO
abrir ↗Exploit-DB
Stacks Mobile App Builder 5.2.3 - Authentication Bypass via Account Takeover
WordPress Stacks Mobile App Builder plugin <= 5.2.3 - Account Takeover vulnerability
63RISCO
abrir ↗Exploit-DB
Sudo 1.9.17 Host Option - Elevation of Privilege
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo
28RISCO
abrir ↗Exploit-DB
Microsoft Outlook - Remote Code Execution (RCE)
Microsoft Outlook Remote Code Execution Vulnerability
33RISCO
abrir ↗Exploit-DB
Sudo chroot 1.9.17 - Local Privilege Escalation
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir ↗Exploit-DB
Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
Microsoft Defender for Endpoint Elevation of Privilege Vulnerability
41RISCO
abrir ↗Exploit-DB
ScriptCase 9.12.006 (23) - Remote Command Execution (RCE)
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connecti
38RISCO
abrir ↗Exploit-DB
Microsoft PowerPoint 2019 - Remote Code Execution (RCE)
Microsoft PowerPoint Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
Discourse 3.2.x - Anonymous Cache Poisoning
Anonymous cache poisoning via XHR requests in Discourse
41RISCO
abrir ↗Exploit-DB
Moodle 4.4.0 - Authenticated Remote Code Execution
Moodle: remote code execution via calculated question types
78RISCO
abrir ↗Exploit-DB
Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o
100RISCO
abrir ↗Exploit-DB
Microsoft SharePoint 2019 - NTLM Authentication
Microsoft SharePoint Server Remote Code Execution Vulnerability
46RISCO
abrir ↗Exploit-DB
gogs 0.13.0 - Remote Code Execution (RCE)
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code
48RISCO
abrir ↗Exploit-DB
Sitecore 10.4 - Remote Code Execution (RCE)
Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through
60RISCO
abrir ↗Exploit-DB
Microsoft Excel 2024 Use after free - Remote Code Execution (RCE)
Microsoft Excel Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
OneTrust SDK 6.33.0 - Denial Of Service (DoS)
An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __
33RISCO
abrir ↗Exploit-DB
McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information
Improper Verification of Cryptographic Signature by McAfee Agent
33RISCO
abrir ↗Exploit-DB
PX4 Military UAV Autopilot 1.12.3 - Denial of Service (DoS)
PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow
33RISCO
abrir ↗Exploit-DB
Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
75RISCO
abrir ↗Exploit-DB
Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_optio
100RISCO
abrir ↗Exploit-DB✓ VexDay Proof
Ingress-NGINX 4.11.0 - Remote Code Execution (RCE)
ingress-nginx admission controller RCE escalation
85RISCO
abrir ↗Exploit-DB
FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, ve
33RISCO
abrir ↗Exploit-DB
Microsoft Excel LTSC 2024 - Remote Code Execution (RCE)
Microsoft Word Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
Microsoft Excel Use After Free - Local Code Execution
Microsoft Excel Remote Code Execution Vulnerability
41RISCO
abrir ↗Exploit-DB
Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.