Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.886exploits catalogados
32.153CVEs com exploração pública
1.932testados em laboratório
8.176 exploits
VulnCheck XDB
infoleak
CVE-2025-31125MEDIUMsob ataque03 mai 2025
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
90RISCO
abrir
VulnCheck XDB
infoleak
CVE-2025-29927CRITICAL03 mai 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque03 mai 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
VulnCheck XDB
local
CVE-2016-5195HIGHsob ataque02 mai 2025
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev
93RISCO
abrir
VulnCheck XDB
denial-of-service
CVE-2024-23113CRITICALsob ataque02 mai 2025
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.
90RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-27956CRITICAL01 mai 2025
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
85RISCO
abrir
VulnCheck XDB
client-side
CVE-2025-24054MEDIUMsob ataque01 mai 2025
NTLM Hash Disclosure Spoofing Vulnerability
75RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31161CRITICALsob ataqueransomware01 mai 2025
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-21756HIGH30 abr 2025
vsock: Keep the binding until socket destruction
41RISCO
abrir
VulnCheck XDB
initial-access
CVE-2024-36401CRITICALsob ataque30 abr 2025
Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware30 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware30 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware30 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware29 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-29927CRITICAL29 abr 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-29927CRITICAL29 abr 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque29 abr 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32433CRITICALsob ataque29 abr 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware29 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware28 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2023-27372CRITICAL28 abr 2025
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-29927CRITICAL28 abr 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-29927CRITICAL28 abr 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir
VulnCheck XDB
local
CVE-2022-0847HIGHsob ataque28 abr 2025
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware28 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32432CRITICALsob ataque27 abr 2025
Craft CMS Allows Remote Code Execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-32432CRITICALsob ataque27 abr 2025
Craft CMS Allows Remote Code Execution
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-24813CRITICALsob ataque27 abr 2025
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-3248CRITICALsob ataqueransomware27 abr 2025
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-31324CRITICALsob ataqueransomware27 abr 2025
Missing Authorization check in SAP NetWeaver (Visual Composer development server)
100RISCO
abrir
anteriorpágina 86 / 273próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.