Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
80.184exploits catalogados
37.029CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentespopularesrisco
15.321 exploits
GitHub PoC
Technical audit of Kioptrix Level 1. Focus: Samba 2.2.1a exploitation (CVE-2003-0201), manual enumeration, and internal infrastructure hardening.
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x vers
60RISCO
abrir ↗GitHub PoC
基于Pocsuite3 框架编写的漏洞验证与利用脚本，用于检测 n8n工作流自动化工具中的认证后远程代码执行漏洞（RCE）
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
Analysis of CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
intelligent-ears/CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
Ushbu videoda Kali Linux orqali Metasploitable 2 serveriga PHP CGI Argument Injection (CVE-2012-1823) ekspluatatsiyasi Metasploit yordamida amalga oshiriladi
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
100RISCO
abrir ↗GitHub PoC
GUI Shodan-powered scanner to identify n8n instances exposed to CVE-2025-68613 (version range 0.211.0–1.122.0)
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
AnGrY-Althaf/CVE-2024-40110
Sourcecodester Poultry Farm Management System v1.0 contains an Unauthenticated Remote Code Execution (RCE) vulnerability
48RISCO
abrir ↗GitHub PoC★ 2
CVE-2025-62215: Windows Kernel Race Condition + Double-Free EoP
Windows Kernel Elevation of Privilege Vulnerability
71RISCO
abrir ↗GitHub PoC
machevalia/CVE-2025-14733
WatchGuard Firebox iked Out of Bounds Write Vulnerability
83RISCO
abrir ↗GitHub PoC
通过GitHub Copilot 辅助分析CVE-2025-68613漏洞
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC★ 146
A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.
Livewire vulnerable to remote command execution during property update hydration
100RISCO
abrir ↗GitHub PoC★ 1
Instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for lazy researchers.
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗GitHub PoC
CVE-2021-3493 OverlayFS privilege escalation exploit framework with advanced red team features. Includes persistence mechanisms, post-exploitation modules, stealth capabilities, and comprehensive documentation. For authorized testing only.
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o
98RISCO
abrir ↗GitHub PoC
ali-py3/Exploit-CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
PoC for HTTP/2 Rapid Reset DDoS Vulnerability - CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir ↗GitHub PoC
This repository contains a laboratory-grade analysis and a **safe Proof-of-Concept** for the vulnerability **CVE-2025-68613**, affecting the workflow automation platform **n8n**.
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC★ 1
js2py sandbox escape to reverse shell
An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to execute arbitrary code via a
68RISCO
abrir ↗GitHub PoC
POC for CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
My poc to exploit this vuln :D
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
nulltrace1336/Samba-Exploit-CVE-2007-2447
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands
50RISCO
abrir ↗GitHub PoC★ 1
Public security advisory for CVE-2025-66209, CVE-2025-66210, CVE-2025-66211, CVE-2025-66212, and CVE-2025-66213
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup
48RISCO
abrir ↗GitHub PoC
a controlled environment to test CVE-2025-55182.
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC★ 6
RCE exploit PoC for CVE-2025-55182 and CVE-2025-66478 in Next.js and React Server Components with scanner and exploitation tools.
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC
Ushbu videoda Metasploitable 2 tizimidagi distccd servisidagi zaiflikdan foydalanib, Kali Linux orqali remote shell olish ko‘rsatib beriladi.
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at
60RISCO
abrir ↗GitHub PoC★ 1
Python toolkit for decrypting AES-256 and cracking PBKDF2 passwords from Grafana databases usually paired with (CVE-2021-43798)
Grafana path traversal
100RISCO
abrir ↗GitHub PoC
React2Shell Critical Vulnerability (CVE-2025-55182)
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC★ 1
Exploit Code for React2Shell RCE vulnerability (CVE-2025-55182) affecting React Server Components 19.0.0-19.2.0. Exploits unsafe deserialization for unauthenticated remote code execution.
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗GitHub PoC
CVE-2025-68613
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir ↗GitHub PoC
Vuln lab for CVE-2024-3408 - D-Tale Authentication Bypass & RCE
Authentication Bypass and RCE in man-group/dtale
85RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.