Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados
32.133CVEs com exploração pública
1.932testados em laboratório
8.156 exploits
VulnCheck XDB
local
CVE-2025-11001HIGH22 nov 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir
VulnCheck XDB
local
CVE-2025-11001HIGH22 nov 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque21 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-59287CRITICALsob ataque21 nov 2025
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-47916CRITICAL21 nov 2025
Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The
85RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque20 nov 2025
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-3248CRITICALsob ataqueransomware20 nov 2025
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-13390CRITICAL20 nov 2025
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
63RISCO
abrir
VulnCheck XDB
local
CVE-2025-11001HIGH20 nov 2025
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALsob ataque20 nov 2025
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-61757CRITICALsob ataque20 nov 2025
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2018-15133HIGHsob ataque19 nov 2025
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-34299CRITICAL19 nov 2025
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2021-1675HIGHsob ataqueransomware19 nov 2025
Windows Print Spooler Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-58034MEDIUMsob ataque19 nov 2025
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vul
90RISCO
abrir
VulnCheck XDB
local
CVE-2025-62215HIGHsob ataque18 nov 2025
Windows Kernel Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
info-leak
CVE-2025-11833CRITICAL18 nov 2025
Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure
75RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALsob ataque18 nov 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque18 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque17 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
local
CVE-2019-13272HIGHsob ataque17 nov 2025
In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a proce
98RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-31199CRITICALsob ataqueransomware17 nov 2025
Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting bot
90RISCO
abrir
VulnCheck XDB
infoleak
CVE-2014-0160HIGHsob ataque17 nov 2025
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-21587CRITICALsob ataqueransomware17 nov 2025
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque17 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-21479HIGHsob ataque16 nov 2025
Incorrect Authorization in Graphics
71RISCO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALsob ataque16 nov 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque15 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque15 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-33073HIGHsob ataque15 nov 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir
anteriorpágina 56 / 272próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.