Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
71.957exploits catalogados
32.195CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentespopularesrisco
13.307 exploits
GitHub PoC★ 13
Proof of concept for CVE-2022-1364 against Alibaba's UC Browser
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit
76RISCO
abrir ↗GitHub PoC★ 1
The default configuration of LDAP on FortiOS v6.0.x to v6.2.0 does not check server identity for LDAP/S leading to MITM attacks. This PoC demos full exfiltration of credentials sent on the local subnet to an LDAP server that is easily impersonated.
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept s
83RISCO
abrir ↗GitHub PoC★ 47
Tool that reproduces CVE-2025-55315 in ASP.NET Core.
ASP.NET Security Feature Bypass Vulnerability
60RISCO
abrir ↗GitHub PoC★ 1
Investigation into the XZ Utils backdoor (CVE-2024-3094): chronology, attack chain, risk to SSH, and supply-chain insights. Includes slides, sources, and mitigations (parity checks, attestations, or SBOMs, as well as SLSA)
Xz: malicious code in distributed source
70RISCO
abrir ↗GitHub PoC★ 149
Exploit for CVE-2025-11001 or CVE-2025-11002
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability
46RISCO
abrir ↗GitHub PoC★ 8
BYOVD research performed by KOSEC. Includes vulnerable drivers and writeups (CVE-2026-0828).
Kernel driver vulnerability in Safetica Endpoint Client
41RISCO
abrir ↗GitHub PoC★ 1
This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password.
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
60RISCO
abrir ↗GitHub PoC
CVE-2024-53677 관련 컨설턴트용 툴 개발
Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks
70RISCO
abrir ↗GitHub PoC
Oracle WebLogic WLS-WSAT Remote Code Execution Exploit (CVE-2017-10271)
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte
100RISCO
abrir ↗GitHub PoC★ 2
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
75RISCO
abrir ↗GitHub PoC★ 20
PoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.
mailcow: dockerized vulnerable to password reset poisoning
41RISCO
abrir ↗GitHub PoC
CVE-2024-46256 tool
A Command injection vulnerability in requestLetsEncryptSsl in NginxProxyManager 2.11.3 allows an attacker to RCE via Add
48RISCO
abrir ↗GitHub PoC
CVE-2025-24893 tool
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir ↗GitHub PoC
This script checks if an HP iLO server is vulnerable and can add an admin user
A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53
60RISCO
abrir ↗GitHub PoC
laachy/CVE-2024-39930-ptrace-detection-mitigation
The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code
48RISCO
abrir ↗GitHub PoC
Tnot123/cve-2024-43425
Moodle: remote code execution via calculated question types
78RISCO
abrir ↗GitHub PoC
Exploit Title: Node.JS - 'node-serialize' Remote Code Execution (2), Version: 0.0.4, CVE: CVE-2017-5941
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu
35RISCO
abrir ↗GitHub PoC
Scottman625/CVE-2023-29360
Microsoft Streaming Service Elevation of Privilege Vulnerability
76RISCO
abrir ↗GitHub PoC★ 1
PoC of "DEF CON 32 - SQL Injection Isn't Dead Smuggling Queries at the Protocol Level - Paul Gerste"
pgx SQL Injection via Protocol Message Size Overflow
48RISCO
abrir ↗GitHub PoC★ 1
Reverse shell for CVE-2024-28397.
An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a
48RISCO
abrir ↗GitHub PoC★ 3
CVE-2024-38856: Apache OFBiz remote code execution Scanner & Exploit
Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
100RISCO
abrir ↗GitHub PoC
syorik/CVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
100RISCO
abrir ↗GitHub PoC
CVE-2024-32113-Apache-OFBiz<18.12.13-Exploit
Apache OFBiz: Path traversal leading to RCE
100RISCO
abrir ↗GitHub PoC
foregenix/CVE-2023-39143
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete
85RISCO
abrir ↗GitHub PoC★ 2
CVE-2023-21554 PoC
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
85RISCO
abrir ↗GitHub PoC
lastvocher/Hikvision-CVE-2017-7921-decryptor
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16
100RISCO
abrir ↗GitHub PoC★ 1
Reproduction and fix of the CVE-2025-29927 vulnerability.
Authorization Bypass in Next.js Middleware
85RISCO
abrir ↗GitHub PoC
Authenticated API Key Exposure in Nagios Log Server 2024R1.3.1
Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagi
53RISCO
abrir ↗GitHub PoC★ 1
Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security research
ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability
53RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.