Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
71.957exploits catalogados
32.195CVEs com exploração pública
1.932testados em laboratório
TodosExploit-DB 22.786Referência 20.003GitHub PoC 13.307VulnCheck XDB 8.182Nuclei 4.217Metasploit 3.462✓ só verificadosrecentespopularesrisco
13.307 exploits
GitHub PoC★ 1
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection
WordPress JS Archive List Plugin < 6.1.6 - SQL Injection Vulnerability
63RISCO
abrir ↗GitHub PoC
CVE-2017-5638- PoC
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗GitHub PoC
Example script demonstrating a weak PRNG, CVE-2008-0166
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that ge
45RISCO
abrir ↗GitHub PoC★ 6
CVE-2025-20352 SNMP Exposure Check (onesixtyone + parser)
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softwa
83RISCO
abrir ↗GitHub PoC
Microsoft HEIF Extension (msheif_store.dll) OOB-read
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return suc
48RISCO
abrir ↗GitHub PoC
CVE-2025-49132
Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution
68RISCO
abrir ↗GitHub PoC
CVE-2025-57174 Unauthenticated Remote Command Execution
An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and p
48RISCO
abrir ↗GitHub PoC
Proof of Concept for CVE-2024-32002: Git submodule path injection vulnerability.
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
53RISCO
abrir ↗GitHub PoC★ 2
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.
63RISCO
abrir ↗GitHub PoC
RCE project
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in
60RISCO
abrir ↗GitHub PoC
iteride/CVE-2025-2294
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
85RISCO
abrir ↗GitHub PoC★ 2
the task from C*****k
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir ↗GitHub PoC
This repository contains a Proof of Concept (PoC) for CVE-2025-32463, a vulnerability in sudo allowing a chroot escape to achieve local privilege escalation.
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir ↗GitHub PoC
Demonstration on exploitation on Drupal 7.57 (CVE-2018-7600) with and without WAF(Web Application Firewall)
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi
100RISCO
abrir ↗GitHub PoC
CVE-2025-34100 test
BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload
63RISCO
abrir ↗GitHub PoC
Next.js middleware auth-bypass lab (CVE-2025-29927 simulation)
Authorization Bypass in Next.js Middleware
85RISCO
abrir ↗GitHub PoC
Michaael01/LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
Microsoft SharePoint Server Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
Proof-of-concept script for CVE-2020-3452 — Cisco ASA/FTD Path Traversal vulnerability. Supports automated extraction of known file targets with a hard limit on successful downloads for safety. Intended for authorized security testing and research purposes only.
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability
100RISCO
abrir ↗GitHub PoC★ 2
Detection for CVE-2025-26399
SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability
100RISCO
abrir ↗GitHub PoC
yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-
Microsoft Outlook Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC★ 1
Playing with CVE-2010-2883
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows
100RISCO
abrir ↗GitHub PoC★ 1
Complete analysis of CVE-2025-21298, a double free vulnerability related to ole32 library in windows.
Windows OLE Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC
ay 09 — CVE-2025-27520 (BentoML-style insecure deserialization) — Local Docker lab
BentoML Allows Remote Code Execution (RCE) via Insecure Deserialization
75RISCO
abrir ↗GitHub PoC★ 10
Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022
Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)
48RISCO
abrir ↗GitHub PoC★ 1
PoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker (PoC) and a working exploit for gaining remote shell access. For educational and research purposes only.
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authent
53RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.