Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.930exploits catalogados

37.572CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.482Referência 23.973GitHub PoC 15.478VulnCheck XDB 9.069Nuclei 4.426Metasploit 3.502✓ só verificadosrecentes populares risco

80.842 exploits

GitHub PoC★ 3

Exploit for CVE-2019-11043

CVE-2019-11043HIGHsob ataqueransomware24 out 2025

Underflow in PHP-FPM can lead to RCE

100RISCO

abrir ↗

GitHub PoC★ 2

Quick and Simple Scripts to Scan for Vulnerable Servers and Packet Level Monitors

CVE-2025-55315CRITICAL24 out 2025

ASP.NET Security Feature Bypass Vulnerability

60RISCO

abrir ↗

GitHub PoC★ 1

Exploit for CVE-2019-18935

CVE-2019-18935CRITICALsob ataqueransomware23 out 2025

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2019-18935CRITICALsob ataqueransomware23 out 2025

Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUp

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2025-61882CRITICALsob ataqueransomware23 out 2025

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-29891MEDIUM23 out 2025

Apache Camel: Camel Message Header Injection through request parameters

55RISCO

abrir ↗

GitHub PoC

srakkk/cve-2024-32002-hook

CVE-2024-32002CRITICAL23 out 2025

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

abrir ↗

GitHub PoC

srakkk/cve-2024-32002-demo

CVE-2024-32002CRITICAL23 out 2025

Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution

53RISCO

abrir ↗

GitHub PoC

Writeup for Tenda AC15 router firmware rehosting and remote command execution (CVE-2020-10987) exploit replication.

CVE-2020-10987CRITICALsob ataque23 out 2025

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary s

100RISCO

abrir ↗

GitHub PoC

cve-2023-2745

CVE-2023-2745MEDIUM22 out 2025

WordPress Core < 6.2.1 - Directory Traversal

70RISCO

abrir ↗

Metasploit600

Magento SessionReaper

CVE-2025-54236CRITICALsob ataque22 out 2025

Adobe Commerce | Improper Input Validation (CWE-20)

100RISCO

abrir ↗

GitHub PoC

Redux Python3 Version of CVE-2010-2861

CVE-2010-2861CRITICALsob ataqueransomware22 out 2025

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re

100RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2010-2861CRITICALsob ataqueransomware22 out 2025

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow re

100RISCO

abrir ↗

GitHub PoC

Script to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)

CVE-2024-3094CRITICAL22 out 2025

Xz: malicious code in distributed source

70RISCO

abrir ↗

GitHub PoC

root Privileges

CVE-2021-3493HIGHsob ataque22 out 2025

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

VulnCheck XDB

local

CVE-2021-3493HIGHsob ataque22 out 2025

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

abrir ↗

VulnCheck XDB

client-side

CVE-2025-54782CRITICAL22 out 2025

@nestjs/devtools-integration's CSRF to Sandbox Escape Allows for RCE against JS Developers

75RISCO

abrir ↗

VulnCheck XDB

infoleak

CVE-2023-2745MEDIUM22 out 2025

WordPress Core < 6.2.1 - Directory Traversal

70RISCO

abrir ↗

VulnCheck XDB

local

CVE-2025-8088HIGHsob ataqueransomware21 out 2025

Path traversal vulnerability in WinRAR

93RISCO

abrir ↗

GitHub PoC★ 1

cesarbtakeda/CVE-2025-31161

CVE-2025-31161CRITICALsob ataqueransomware21 out 2025

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-32433CRITICALsob ataque20 out 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-59287CRITICALsob ataque20 out 2025

Windows Server Update Service (WSUS) Remote Code Execution Vulnerability

100RISCO

abrir ↗

VulnCheck XDB

denial-of-service

CVE-2015-1635CRITICALsob ataque20 out 2025

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

GitHub PoC

moeinmiadi/CVE-2015-1635_PoC

CVE-2015-1635CRITICALsob ataque20 out 2025

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an

100RISCO

abrir ↗

GitHub PoC

Proof-of-Concept (POC) of a simple firewall in Python designed to mitigate the Spring4Shell (CVE-2022-22965) RCE attack by inspecting and blocking malicious request bodies.

CVE-2022-22965CRITICALsob ataque19 out 2025

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b

100RISCO

abrir ↗

GitHub PoC★ 1

📋 ملخص مشروع MikroTik RouterOS 6.49.18 Exploit Kit 🎯 نظرة عامة تم إنشاء مشروع احترافي وشامل لاختراق أجهزة MikroTik RouterOS 6.49.18 يتضمن جميع المكونات المطلوبة مع واجهة عربية كاملة وتوثيق مفصل. ✅ المكونات المكتملة 1️⃣ سكربتات الاختراق (7 سكربتات ✅ المميزات الرئيسية 1🎯 دعم CVE-2023-30799 اقراء دليل ملخص شامل للاداة PROJECT_SUMMARY.md

CVE-2023-30799CRITICAL19 out 2025

MikroTik RouterOS Administrator Privilege Escalation

48RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2023-28121—19 out 2025

An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to s

60RISCO

abrir ↗

GitHub PoC★ 6

专业级HTTP请求走私漏洞利用与自动化渗透测试工具

CVE-2025-55315CRITICAL19 out 2025

ASP.NET Security Feature Bypass Vulnerability

60RISCO

abrir ↗

GitHub PoC

robbin0919/CVE-2025-32463

CVE-2025-32463CRITICALsob ataque19 out 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISCO

abrir ↗

VulnCheck XDB

initial-access

CVE-2025-32433CRITICALsob ataque19 out 2025

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

100RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.