Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.557exploits catalogados

37.313CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.478Referência 23.776GitHub PoC 15.367VulnCheck XDB 9.019Nuclei 4.415Metasploit 3.502✓ só verificadosrecentes populares risco

15.367 exploits

GitHub PoC

Bug Chain XSS (CVE-2020-35730 and CVE-2023-43770) to SQLi (CVE-2021-44026)

CVE-2021-44026CRITICALsob ataque20 abr 2025

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

90RISCO

abrir ↗

GitHub PoC★ 2

nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327

CVE-2020-0796CRITICALsob ataqueransomware20 abr 2025

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

abrir ↗

GitHub PoC

Bug Chain XSS (CVE-2020-35730 and CVE-2023-43770) to SQLi (CVE-2021-44026)

CVE-2023-43770MEDIUMsob ataque20 abr 2025

Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craft

75RISCO

abrir ↗

GitHub PoC★ 2

nmap scripts for vuln cve-2020-0796 & cve-2019-7238 & cve2019-11580 & cve2017-6327

CVE-2019-7238CRITICALsob ataque20 abr 2025

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

100RISCO

abrir ↗

GitHub PoC

Bug Chain XSS (CVE-2020-35730 and CVE-2023-43770) to SQLi (CVE-2021-44026)

CVE-2020-35730MEDIUMsob ataque20 abr 2025

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attack

75RISCO

abrir ↗

GitHub PoC

JenmrR/Node.js-CVE-2024-39943

CVE-2024-39943CRITICAL19 abr 2025

rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote auth

60RISCO

abrir ↗

GitHub PoC

Go-based exploit for CVE-2025-32433

CVE-2025-32433CRITICALsob ataque19 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 6

0xPThree/cve-2025-32433

CVE-2025-32433CRITICALsob ataque19 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 3

Simple Exploit for Dirty Pipe Vulnerability (CVE-2022-0847) This repository contains a simple proof of concept (PoC) for the Dirty Pipe vulnerability (CVE-2022-0847), which affects Linux kernel versions 5.8 to 5.16. This exploit demonstrates local privilege escalation by leveraging improper handling of pipe buffers in the kernel.

CVE-2022-0847HIGHsob ataque19 abr 2025

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop

100RISCO

abrir ↗

GitHub PoC★ 1

cybermads/CVE-2020-0796

CVE-2020-0796CRITICALsob ataqueransomware19 abr 2025

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h

100RISCO

abrir ↗

GitHub PoC

pruthuraut/CVE-2025-28121

CVE-2025-28121MEDIUM19 abr 2025

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" p

33RISCO

abrir ↗

GitHub PoC★ 2

The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads.

CVE-2024-8425CRITICAL19 abr 2025

WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

63RISCO

abrir ↗

GitHub PoC★ 7

CVE-2023-38408 SSH Vulnerability Scanner & PoC

CVE-2023-38408CRITICAL19 abr 2025

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

70RISCO

abrir ↗

GitHub PoC★ 5

CVE-2025-24813的vulhub环境的POC脚本

CVE-2025-24813CRITICALsob ataque18 abr 2025

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

100RISCO

abrir ↗

GitHub PoC

FortiGate SSL-VPN CVE-2023-27997 Exploit PoC Script with ROP Chain

CVE-2023-27997CRITICALsob ataqueransomware18 abr 2025

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, versi

100RISCO

abrir ↗

GitHub PoC

PHP CGI Parameter Injection Vulnerability (RCE: Remote Code Execution)

CVE-2024-4577CRITICALsob ataqueransomware18 abr 2025

Argument Injection in PHP-CGI

100RISCO

abrir ↗

GitHub PoC★ 4

PoC - CVE-2025-24071 / CVE-2025-24054, NTMLv2 hash'leri alınabilen bir vulnerability

CVE-2025-24054MEDIUMsob ataque18 abr 2025

NTLM Hash Disclosure Spoofing Vulnerability

75RISCO

abrir ↗

GitHub PoC

Grand-Moomin/Vuln-Next.js-CVE-2025-29927

CVE-2025-29927CRITICAL18 abr 2025

Authorization Bypass in Next.js Middleware

85RISCO

abrir ↗

GitHub PoC★ 1

This is for educational porpuses only. Please do not use agains unathorized systems.

CVE-2024-42327CRITICAL18 abr 2025

SQL injection in user.get API

70RISCO

abrir ↗

GitHub PoC★ 3

Exploitation module for CVE-2025-32433 (Erlang/OTP)

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 3

Security research on Erlang/OTP SSH CVE-2025-32433.

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 142

CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 5

python script to find vulnerable targets of CVE-2025-32433

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 1

Erlang/OTP SSH 远程代码执行漏洞

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC

Epivalent/CVE-2025-32433-detection

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 16

The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication.

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 3

Missing Authentication for Critical Function (CWE-306)-Exploit

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 5

ekomsSavior/POC_CVE-2025-32433

CVE-2025-32433CRITICALsob ataque18 abr 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

GitHub PoC★ 1

ethicalPap/CVE-2025-29775

CVE-2025-29775CRITICAL17 abr 2025

xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment

48RISCO

abrir ↗

GitHub PoC

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with actionable steps for mitigation: upgrades, HTTP/2 hardening, and patch automation. Includes Nessus scan validation and proactive monitoring strategies.

CVE-2021-23017—17 abr 2025

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from t

35RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.