Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.836exploits catalogados
32.133CVEs com exploração pública
1.932testados em laboratório
8.156 exploits
VulnCheck XDB
local
CVE-2025-62215HIGHsob ataque14 nov 2025
Windows Kernel Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-9316MEDIUM14 nov 2025
N-central unauthenticated sessionID generation
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque14 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-64446CRITICALsob ataque14 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-11700HIGH14 nov 2025
N-central Multiple XXE Injection Vulnerabilities
68RISCO
abrir
VulnCheck XDB
initial-access
CVE-2022-22965CRITICALsob ataque14 nov 2025
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-33073HIGHsob ataque14 nov 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-64446CRITICALsob ataque13 nov 2025
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-7771HIGH13 nov 2025
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-8088HIGHsob ataque13 nov 2025
Path traversal vulnerability in WinRAR
93RISCO
abrir
VulnCheck XDB
client-side
CVE-2020-9802HIGH12 nov 2025
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa
41RISCO
abrir
VulnCheck XDB
local
CVE-2025-60710HIGHsob ataque12 nov 2025
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2024-31982CRITICAL11 nov 2025
XWiki Platform: Remote code execution as guest via DatabaseSearch
75RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-51378CRITICALsob ataqueransomware11 nov 2025
getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-25257CRITICALsob ataque11 nov 2025
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-60710HIGHsob ataque11 nov 2025
Host Process for Windows Tasks Elevation of Privilege Vulnerability
71RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-48703CRITICALsob ataque11 nov 2025
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2023-3581311 nov 2025
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experi
60RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-34299CRITICAL10 nov 2025
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-11953CRITICALsob ataque10 nov 2025
Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests
90RISCO
abrir
VulnCheck XDB
infoleak
CVE-2021-40438CRITICALsob ataque09 nov 2025
mod_proxy SSRF
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-48384HIGHsob ataque08 nov 2025
Git allows arbitrary code execution through broken config quoting
71RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-21042HIGHsob ataque08 nov 2025
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitra
76RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque08 nov 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-11749CRITICAL08 nov 2025
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
85RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-9491MEDIUM07 nov 2025
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
45RISCO
abrir
VulnCheck XDB
initial-access
CVE-2020-5902CRITICALsob ataqueransomware07 nov 2025
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-59287CRITICALsob ataque06 nov 2025
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-54236CRITICALsob ataque06 nov 2025
Adobe Commerce | Improper Input Validation (CWE-20)
100RISCO
abrir
VulnCheck XDB
client-side
CVE-2024-21413CRITICALsob ataque06 nov 2025
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir
anteriorpágina 57 / 272próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.