Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.184exploits catalogados

37.029CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.521GitHub PoC 15.321VulnCheck XDB 8.970Nuclei 4.394Metasploit 3.502✓ só verificadosrecentes populares risco

15.321 exploits

GitHub PoC

AndrewMas99/CVE-2019-11043-Vulnerability

CVE-2019-11043HIGHsob ataqueransomware28 nov 2025

Underflow in PHP-FPM can lead to RCE

100RISCO

abrir ↗

GitHub PoC

CVE-2010-2075

CVE-2010-2075—28 nov 2025

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally

60RISCO

abrir ↗

GitHub PoC

Exploit - CVE-2023-26360

CVE-2023-26360HIGHsob ataque28 nov 2025

Adobe ColdFusion Improper Access Control Arbitrary code execution

100RISCO

abrir ↗

GitHub PoC

MagentaBear/CVE-2019-11043-Vulnerability

CVE-2019-11043HIGHsob ataqueransomware28 nov 2025

Underflow in PHP-FPM can lead to RCE

100RISCO

abrir ↗

GitHub PoC★ 4

Secure expression evaluator - Drop-in replacement for expr-eval without CVE-2025-12735 vulnerability

CVE-2025-12735CRITICAL27 nov 2025

CVE-2025-12735

48RISCO

abrir ↗

GitHub PoC

Chroot Privilege Escalation

CVE-2025-32463CRITICALsob ataque27 nov 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISCO

abrir ↗

GitHub PoC★ 1

Proof-of-concept exploit for CVE-2025-55315 (.NET HTTP Request Smuggling). Demonstrates how improperly parsed chunked encoding lets attackers smuggle requests past proxies and load balancers in vulnerable ASP.NET Core/Kestrel servers.

CVE-2025-55315CRITICAL27 nov 2025

ASP.NET Security Feature Bypass Vulnerability

60RISCO

abrir ↗

GitHub PoC

CVE-2021-43798 is a high-severity path traversal vulnerability (CVSS 3.1 score: 7.5) affecting Grafana versions 8.0.0-beta1 through 8.3.0. It allows unauthenticated attackers to read arbitrary files from the server by exploiting improper sanitization in the /public/plugins/:pluginId endpoint

CVE-2021-43798HIGHsob ataque27 nov 2025

Grafana path traversal

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2017-7921 is a critical vulnerability (CVSS score: 9.8) affecting multiple Hikvision IP camera and DVR models, first disclosed in 2017. It stems from an improper authentication flaw that allows unauthenticated remote attackers to bypass login mechanisms and gain unauthorized access to sensitive system information

CVE-2017-7921CRITICALsob ataque27 nov 2025

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 16

100RISCO

abrir ↗

GitHub PoC

CVE-2025-58360

CVE-2025-58360HIGHsob ataque27 nov 2025

GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

98RISCO

abrir ↗

GitHub PoC

TeamCity 2023.05.3 - CVE-2023-42793 - Create username administrator.

CVE-2023-42793CRITICALsob ataqueransomware27 nov 2025

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

100RISCO

abrir ↗

GitHub PoC

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

CVE-2025-32433CRITICALsob ataque27 nov 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 6

XXE through a specific endpoint /geoserver/wms operation GetMap - Geoserver

CVE-2025-58360HIGHsob ataque27 nov 2025

GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature

98RISCO

abrir ↗

GitHub PoC★ 1

CVE-2017-0144

CVE-2017-0144HIGHsob ataqueransomware27 nov 2025

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

abrir ↗

GitHub PoC

yunus-a1i/veeam-cve-2023-27532-mock

CVE-2023-27532HIGHsob ataqueransomware26 nov 2025

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database

93RISCO

abrir ↗

GitHub PoC

Path Traversal Apache HTTP Server 2.4.49/2.4.50

CVE-2021-41773HIGHsob ataqueransomware26 nov 2025

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

abrir ↗

GitHub PoC★ 2

ExtremeUday/CVE-2025-2945-pgAdmin4-Authenticated-RCE-PoC-

CVE-2025-2945CRITICAL26 nov 2025

pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment

75RISCO

abrir ↗

GitHub PoC★ 3

PoC RCE exploit for Nostromo nhttpd ≤ 1.9.6

CVE-2019-16278CRITICALsob ataque26 nov 2025

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote co

100RISCO

abrir ↗

GitHub PoC

OS command injection vulnerability in Samba that received the maximum possible CVSS v3.1 score of 10.0

CVE-2025-10230CRITICAL26 nov 2025

Samba: command injection in wins server hook script

60RISCO

abrir ↗

GitHub PoC

CVE-2025-6389

CVE-2025-6389CRITICAL26 nov 2025

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

85RISCO

abrir ↗

GitHub PoC

Proof-of-Concept (PoC) for CVE-2025-62168 👾

CVE-2025-62168CRITICAL25 nov 2025

Squid vulnerable to information disclosure via authentication credential leakage in error handling

75RISCO

abrir ↗

GitHub PoC

CVE-2025-61757

CVE-2025-61757CRITICALsob ataque25 nov 2025

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers

100RISCO

abrir ↗

GitHub PoC★ 2

Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943

CVE-2024-29943CRITICAL25 nov 2025

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds chec

53RISCO

abrir ↗

GitHub PoC★ 31

aklnjakln/CVE-2025-6554

CVE-2025-6554HIGHsob ataque25 nov 2025

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v

76RISCO

abrir ↗

GitHub PoC★ 2

Tutorial of CVE-2022-37969 with focus on the methodology of Kernel exploitation, not CVE's internal causes

CVE-2022-37969HIGHsob ataqueransomware25 nov 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

abrir ↗

GitHub PoC

CVE-2012-2122 MySQL Authentication Bypass Home Lab

CVE-2012-2122—24 nov 2025

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor

60RISCO

abrir ↗

GitHub PoC

CVE-2025-12762

CVE-2025-12762CRITICAL24 nov 2025

Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)

53RISCO

abrir ↗

GitHub PoC

CVE-2025-41115

CVE-2025-41115CRITICAL24 nov 2025

Incorrect privilege assignment

53RISCO

abrir ↗

GitHub PoC

Juniper JunOS J-Web PHP external variable modification (CVE-2023-36845) exploit.

CVE-2023-36845CRITICALsob ataque24 nov 2025

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

100RISCO

abrir ↗

GitHub PoC★ 1

A easy poc for CVE-2024-12084.

CVE-2024-12084CRITICAL24 nov 2025

Rsync: heap buffer overflow in rsync due to improper checksum length handling

70RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.