Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados

37.130CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.476Referência 23.614GitHub PoC 15.330VulnCheck XDB 9.001Nuclei 4.401Metasploit 3.502✓ só verificadosrecentes populares risco

15.330 exploits

GitHub PoC

his project demonstrates the exploitation of the vsFTPd 2.3.4 backdoor vulnerability (CVE-2011-2523) using Metasploitable 2 and Kali Linux with Metasploit. It includes reconnaissance, exploitation, and defensive measures, with a detailed report and lab setup for learning ethical hacking and security best practices.

CVE-2011-2523—25 ago 2025

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

60RISCO

GitHub PoC

TamatahYT/CVE-2017-8481

CVE-2017-8481—25 ago 2025

The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2,

23RISCO

GitHub PoC

PoC

CVE-2025-48384HIGHsob ataque25 ago 2025

Git allows arbitrary code execution through broken config quoting

71RISCO

GitHub PoC

A research regarding the exisiting CVE exploit : CVE-2021-3156(Sudo BufferOverflow)

CVE-2021-3156HIGHsob ataque25 ago 2025

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege

100RISCO

GitHub PoC★ 3

Apache Struts2 CVE-2017-5638 (Safe Educational Demo)

CVE-2017-5638CRITICALsob ataqueransomware25 ago 2025

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha

100RISCO

GitHub PoC★ 2

Odoo ≤17 is vulnerable to CVE-2024-4367, allowing arbitrary JavaScript execution via PDF.js.

CVE-2024-4367MEDIUM25 ago 2025

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISCO

GitHub PoC

a1ex-var1amov/ctf-cve-2024-4577

CVE-2024-4577CRITICALsob ataqueransomware25 ago 2025

Argument Injection in PHP-CGI

100RISCO

GitHub PoC★ 95

mistymntncop/CVE-2025-5419

CVE-2025-5419HIGHsob ataque25 ago 2025

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially expl

71RISCO

GitHub PoC★ 28

watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309

CVE-2025-54309CRITICALsob ataque25 ago 2025

CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and

100RISCO

GitHub PoC★ 10

zenzue/CVE-2025-9074

CVE-2025-9074CRITICAL25 ago 2025

Docker Desktop allows unauthenticated access to Docker Engine API from containers

48RISCO

GitHub PoC

Quick and easy exploitation of CVE-2024-4956 for LFI.

CVE-2024-4956HIGH24 ago 2025

Nexus Repository 3 - Path Traversal

61RISCO

GitHub PoC★ 5

POC of CVE-2025-49113

CVE-2025-49113CRITICALsob ataque24 ago 2025

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the

100RISCO

GitHub PoC★ 114

This is POC for IOS 0click CVE-2025-43300

CVE-2025-43300CRITICALsob ataque24 ago 2025

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 1

83RISCO

GitHub PoC★ 41

Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.

CVE-2025-24085CRITICALsob ataque23 ago 2025

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, i

83RISCO

GitHub PoC

donmedfor/CVE-2015-3306

CVE-2015-3306—23 ago 2025

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

GitHub PoC

２０２５年８月２０日に公開されたDockerDesktopの脆弱性(対策済み)を実証する

CVE-2025-9074CRITICAL23 ago 2025

Docker Desktop allows unauthenticated access to Docker Engine API from containers

48RISCO

GitHub PoC★ 1

POC exploit for CVE-2025-33053 (external control of file execution path in URL file)

CVE-2025-33053HIGHsob ataque23 ago 2025

Internet Shortcut Files Remote Code Execution Vulnerability

100RISCO

GitHub PoC★ 1

Este repositório contém um script de prova de conceito (PoC) que demonstra uma vulnerabilidade crítica encontrada no plugin Simple File List para WordPress.

CVE-2020-36847CRITICAL23 ago 2025

Simple File List < 4.2.3 - Remote Code Execution

75RISCO

GitHub PoC

Sequelize Sql Injection 취약점 구현

CVE-2023-25813CRITICAL23 ago 2025

SQL Injection via replacements in sequelize

48RISCO

GitHub PoC

A PHP CGI Vulnerability Scanner for CVE-2024-4577

CVE-2024-4577CRITICALsob ataqueransomware23 ago 2025

Argument Injection in PHP-CGI

100RISCO

GitHub PoC

Telerik CVE-2019-18935 Vulnerability Scanner

CVE-2019-18935CRITICALsob ataqueransomware22 ago 2025

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

GitHub PoC

0xr2r/CVE-2024-4367

CVE-2024-4367MEDIUM22 ago 2025

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISCO

GitHub PoC

Explotación vulnerabilidad Dirty COW (CVE-2016-5195) en Ubuntu 16.04.1.

CVE-2016-5195HIGHsob ataque22 ago 2025

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by lev

93RISCO

GitHub PoC★ 1

Kryptoenix/CVE-2025-47987_PoC

CVE-2025-47987HIGH22 ago 2025

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

41RISCO

GitHub PoC★ 2

PoC exploit for Below privilege escalation (CVE-2025-27591) allowing local root access via symlink manipulation in world-writable log directory.

CVE-2025-27519CRITICAL22 ago 2025

Cognita Arbitrary File Write

48RISCO

GitHub PoC

The exploit code for CVE-2025-43300.

CVE-2025-43300CRITICALsob ataque22 ago 2025

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 1

83RISCO

GitHub PoC★ 1

Some poorly crafted exploit scripts

CVE-2025-24893CRITICALsob ataque22 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

GitHub PoC★ 1

Fix for undefined method each in Metasploit’s bailiwicked_domain.rb (CVE-2008-1447 DNS cache poisoning module)

CVE-2008-1447—22 ago 2025

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windo

60RISCO

GitHub PoC★ 1

CVE-2023-35078 - Ivanti MobileIron Core Remote Unauthenticated API Access Exploit tool

CVE-2023-35078CRITICALsob ataqueransomware21 ago 2025

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or re

100RISCO

GitHub PoC

This PoC is for authorized study and testing. CVE-2025-8088 is actively exploited, and misuse may violate laws or cause harm. Update to WinRAR 7.13+ to avoid suspicious RARs.

CVE-2025-8088HIGHsob ataqueransomware21 ago 2025

Path traversal vulnerability in WinRAR

93RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.