Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.557exploits catalogados

37.313CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.478Referência 23.776GitHub PoC 15.367VulnCheck XDB 9.019Nuclei 4.415Metasploit 3.502✓ só verificadosrecentes populares risco

15.367 exploits

GitHub PoC★ 4

Designed for Demonstration of Deep Exploitation.

CVE-2025-32756CRITICALsob ataque18 mai 2025

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCa

83RISCO

abrir ↗

GitHub PoC

Mitel MiCollab Authentication Bypass to Arbitrary File Read

CVE-2024-41713CRITICALsob ataqueransomware18 mai 2025

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could

100RISCO

abrir ↗

GitHub PoC★ 200

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

CVE-2025-31200CRITICALsob ataque17 mai 2025

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4

83RISCO

abrir ↗

GitHub PoC★ 4

Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation

CVE-2025-47539CRITICAL17 mai 2025

WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

68RISCO

abrir ↗

GitHub PoC

Automation Exploit

CVE-2021-4034HIGHsob ataqueransomware17 mai 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

tdevworks/CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472MEDIUMsob ataqueransomware17 mai 2025

Netlogon Elevation of Privilege Vulnerability

100RISCO

abrir ↗

GitHub PoC

tdevworks/CVE-2020-0796-SMBGhost-Exploit-Demo

CVE-2020-0796CRITICALsob ataqueransomware17 mai 2025

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

abrir ↗

GitHub PoC

CyprianAtsyor/LetsDefend-CVE-2022-41082-Exploitation-Attempt

CVE-2022-41082HIGHsob ataqueransomware16 mai 2025

Microsoft Exchange Server Remote Code Execution Vulnerability

100RISCO

abrir ↗

GitHub PoC★ 2

GadaLuBau1337/CVE-2025-32583

CVE-2025-32583CRITICAL16 mai 2025

WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

53RISCO

abrir ↗

GitHub PoC

PenguinCabinet/CVE-2024-4367-hands-on

CVE-2024-4367MEDIUM16 mai 2025

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c

55RISCO

abrir ↗

GitHub PoC★ 4

Ivanti EPMM Pre-Auth RCE Chain

CVE-2025-4428HIGHsob ataque16 mai 2025

Remote Code Execution

100RISCO

abrir ↗

GitHub PoC

Software Vulnerabilities and mitigation university course, to show exploitation and remediation caused by this vulnerability

CVE-2021-4034HIGHsob ataqueransomware16 mai 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC★ 2

WordPress PSW Front-end Login & Registration Plugin <= 1.12 is vulnerable to Broken Authentication

CVE-2025-47646CRITICAL16 mai 2025

WordPress PSW Front-end Login & Registration plugin <= 1.13 - Broken Authentication Vulnerability

68RISCO

abrir ↗

GitHub PoC★ 1

(CVE-2024-51793) Wordpress Plugin: Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload

CVE-2024-51793CRITICAL15 mai 2025

WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability

48RISCO

abrir ↗

GitHub PoC★ 2

演示 Next.js 中的 Middleware 授權繞過漏洞 (CVE-2025-29927) 允許未經授權的用戶存取受保護的資訊。

CVE-2025-29927CRITICAL15 mai 2025

Authorization Bypass in Next.js Middleware

85RISCO

abrir ↗

GitHub PoC

Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE – QUB CSC3064 Network Security Assessment

CVE-2023-20198CRITICALsob ataque15 mai 2025

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS

100RISCO

abrir ↗

GitHub PoC★ 1

GadaLuBau1337/CVE-2025-3605

CVE-2025-3605CRITICAL15 mai 2025

Frontend Login and Registration Blocks <= 1.1.1 - Unauthenticated Privilege Escalation via Account Takeover

63RISCO

abrir ↗

GitHub PoC★ 11

watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

CVE-2025-4427MEDIUMsob ataque15 mai 2025

Authentication Bypass

100RISCO

abrir ↗

GitHub PoC★ 1

CVE-2025-4094 – WordPress Digits Plugin < 8.4.6.1 - OTP Authentication Bypass

CVE-2025-4094CRITICAL15 mai 2025

Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

53RISCO

abrir ↗

GitHub PoC★ 2

WordPress Plugin Digits < 8.4.6.1 - OTP Auth Bypass via Bruteforce (CVE-2025-4094)

CVE-2025-4094CRITICAL15 mai 2025

Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

53RISCO

abrir ↗

GitHub PoC

This contains single-file exploit for cve-2021-4034 which is a Polkit Local Privilege Escalation. Use it wisely!

CVE-2021-4034HIGHsob ataqueransomware14 mai 2025

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool

100RISCO

abrir ↗

GitHub PoC

fatkz/CVE-2020-17530

CVE-2020-17530CRITICALsob ataque14 mai 2025

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected

100RISCO

abrir ↗

GitHub PoC

This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.

CVE-2015-3306—14 mai 2025

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and

60RISCO

abrir ↗

GitHub PoC★ 29

encrypter15/CVE-2025-29824

CVE-2025-29824HIGHsob ataqueransomware14 mai 2025

Windows Common Log File System Driver Elevation of Privilege Vulnerability

76RISCO

abrir ↗

GitHub PoC★ 1

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

CVE-2025-2294CRITICAL13 mai 2025

Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

85RISCO

abrir ↗

GitHub PoC

A Python PoC for CVE-2022-21661, adapted from z92g's Go PoC, designed to demonstrate the vulnerability in a more accessible scripting environment.

CVE-2022-21661HIGH13 mai 2025

SQL injection in WordPress

78RISCO

abrir ↗

GitHub PoC★ 2

CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.

CVE-2025-3248CRITICALsob ataqueransomware13 mai 2025

Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

100RISCO

abrir ↗

GitHub PoC

MandipJoshi/CVE-2021-3560

CVE-2021-3560HIGHsob ataque13 mai 2025

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile

91RISCO

abrir ↗

GitHub PoC

使用PowsrShell掃描CVE-2024-4577

CVE-2024-4577CRITICALsob ataqueransomware12 mai 2025

Argument Injection in PHP-CGI

100RISCO

abrir ↗

GitHub PoC★ 55

WHW0x455/CVE-2023-41992

CVE-2023-41992HIGHsob ataque12 mai 2025

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macO

71RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.