Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados

37.572CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

80.842 exploits

VulnCheck XDB

infoleak

CVE-2025-64446CRITICALsob ataque14 nov 2025

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

GitHub PoC

CVE-2022-22965 proof of concept for CS4239 report

CVE-2022-22965CRITICALsob ataque14 nov 2025

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC★ 67

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

CVE-2025-33073HIGHsob ataque14 nov 2025

Windows SMB Client Elevation of Privilege Vulnerability

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-11700HIGH14 nov 2025

N-central Multiple XXE Injection Vulnerabilities

68RISCO

abrir ↗

Metasploit600

Fortinet FortiWeb unauthenticated RCE

CVE-2025-64446CRITICALsob ataque14 nov 2025

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

Metasploit300

Fortinet FortiWeb create new local admin

CVE-2025-64446CRITICALsob ataque14 nov 2025

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

Metasploit600

Fortinet FortiWeb unauthenticated RCE

CVE-2025-58034MEDIUMsob ataque14 nov 2025

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vul

90RISCO

abrir ↗

GitHub PoC★ 13

sxyrxyy/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

CVE-2025-64446CRITICALsob ataque14 nov 2025

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

GitHub PoC★ 67

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

CVE-2025-33073HIGHsob ataque14 nov 2025

Windows SMB Client Elevation of Privilege Vulnerability

93RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-9316MEDIUM14 nov 2025

N-central unauthenticated sessionID generation

60RISCO

abrir ↗

GitHub PoC★ 15

Arbitrary physical memory read/write exploitation using ThrottleStop.sys (CVE-2025-7771) with superfetch address translation - Windows kernel security research

CVE-2025-7771HIGH13 nov 2025

Code Execution / Escalation of Privileges in ThrottleStop

41RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-64446CRITICALsob ataque13 nov 2025

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb

100RISCO

abrir ↗

GitHub PoC

cyhe50/cve-2025-32434-poc

CVE-2025-32434CRITICAL13 nov 2025

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

48RISCO

abrir ↗

GitHub PoC

keyuraghao/CVE-2025-20260

CVE-2025-20260CRITICAL13 nov 2025

ClamAV PDF Scanning Buffer Overflow Vulnerability

48RISCO

abrir ↗

VulnCheck XDB

local

CVE-2025-7771HIGH13 nov 2025

Code Execution / Escalation of Privileges in ThrottleStop

41RISCO

abrir ↗

GitHub PoC★ 7

PoC Exploit CVE-2018-6389

CVE-2018-6389—13 nov 2025

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the

45RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2025-8088HIGHsob ataqueransomware13 nov 2025

Path traversal vulnerability in WinRAR

93RISCO

abrir ↗

GitHub PoC★ 24

redpack-kr/CVE-2025-60710

CVE-2025-60710HIGHsob ataqueransomware12 nov 2025

Host Process for Windows Tasks Elevation of Privilege Vulnerability

71RISCO

abrir ↗

GitHub PoC

Alex-Acero-Security/CVE-2024-48910-POC

CVE-2024-48910CRITICAL12 nov 2025

DOMPurify vulnerable to tampering by prototype polution

48RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2020-9802HIGH12 nov 2025

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, wa

41RISCO

abrir ↗

VulnCheck XDB

local

CVE-2025-60710HIGHsob ataqueransomware12 nov 2025

Host Process for Windows Tasks Elevation of Privilege Vulnerability

71RISCO

abrir ↗

GitHub PoC★ 1

Comprehensive Proof of Concept collection for CVE-2025-11953, CVE-2025-59287, CVE-2025-8941 with exploitation frameworks in Python, C, Bash, PowerShell

CVE-2025-11953CRITICALsob ataque11 nov 2025

Command injection in React Native Community CLI allows remote attackers to perform remote code execution by sending HTTP requests

100RISCO

abrir ↗

GitHub PoC★ 2

AstrBot老版本RCE

CVE-2025-55449HIGH11 nov 2025

AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool as the hardcoded private key us

41RISCO

abrir ↗

GitHub PoC★ 2

CVE-2025-48703 é uma vulnerabilidade de Execução Remota de Código (RCE) no módulo filemanager de um painel de hospedagem web (por exemplo, cPanel). Ocorre devido ao tratamento de entrada não sanitizado na função acc=changePerm, que permite que um atacante injete e execute comandos.

CVE-2025-48703CRITICALsob ataque11 nov 2025

CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell

100RISCO

abrir ↗

VulnCheck XDB

local

CVE-2025-60710HIGHsob ataqueransomware11 nov 2025

Host Process for Windows Tasks Elevation of Privilege Vulnerability

71RISCO

abrir ↗

GitHub PoC★ 2

Mitchellzhou1/CVE-2024-48910-PoC

CVE-2024-48910CRITICAL11 nov 2025

DOMPurify vulnerable to tampering by prototype polution

48RISCO

abrir ↗

GitHub PoC

CVE-2025-21042

CVE-2025-21042HIGHsob ataque11 nov 2025

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitra

83RISCO

abrir ↗

GitHub PoC

CVE-2025-25257 PoC for educational use and/or authorised pentesting.

CVE-2025-25257CRITICALsob ataque11 nov 2025

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-25257CRITICALsob ataque11 nov 2025

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2024-51378CRITICALsob ataqueransomware11 nov 2025

getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers t

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.