Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.415exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.615VulnCheck XDB 9.134Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
81.064 exploits
Exploit-DB
Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)
A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript
33RISCO
abrir ↗Exploit-DB
PHP CGI Module 8.3.4 - Remote Code Execution (RCE)
Argument Injection in PHP-CGI
100RISCO
abrir ↗Exploit-DB
Parrot and DJI variants Drone OSes - Kernel Panic Exploit
dm-bufio: don't schedule in atomic context
23RISCO
abrir ↗Exploit-DB
PCMan FTP Server 2.0.7 - Buffer Overflow
PCMan FTP Server RMD Command buffer overflow
33RISCO
abrir ↗Exploit-DB
Windows 11 SMB Client - Privilege Escalation & Remote Code Execution (RCE)
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗GitHub PoC★ 4
SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal
SolarWinds Serv-U L Directory Transversal Vulnerability
100RISCO
abrir ↗GitHub PoC
Exerrdev/CVE-2024-9264-Fixed
Grafana SQL Expressions allow for remote code execution
85RISCO
abrir ↗Exploit-DB
Microsoft Excel Use After Free - Local Code Execution
Microsoft Excel Remote Code Execution Vulnerability
41RISCO
abrir ↗GitHub PoC★ 3
CVE-2023-1698 exploit with golang
WAGO: WBM Command Injection in multiple products
85RISCO
abrir ↗GitHub PoC★ 8
This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome (version 134.0.6998.177), leveraging improper handle , validation via Mojo IPC.
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow
71RISCO
abrir ↗GitHub PoC★ 2
CrushFTP 11.3.1 - Authentication Bypass
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISCO
abrir ↗VulnCheck XDB
initial-access
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
100RISCO
abrir ↗VulnCheck XDB
denial-of-service
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗GitHub PoC
MAHABUB122003/Atlassian-CVE-2022-26134
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗GitHub PoC★ 2
Checks if your Chrome version is vulnerable to CVE-2025-5419, from the browser
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially expl
71RISCO
abrir ↗GitHub PoC
CVE-2014-6271(RCE) poc Exploit
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗VulnCheck XDB
initial-access
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
100RISCO
abrir ↗GitHub PoC★ 1
LipeOzyy/CVE-2010-1872-BlazeDVD-SEH-Exploit
Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject a
23RISCO
abrir ↗GitHub PoC★ 1
grass341/CVE-2022-37969
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗VulnCheck XDB
remote-with-credentials
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and exe
83RISCO
abrir ↗GitHub PoC★ 1
This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request.
Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows
48RISCO
abrir ↗GitHub PoC
maqeel-git/CVE-2020-0796
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir ↗VulnCheck XDB
initial-access
In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an un
100RISCO
abrir ↗GitHub PoC
CVE-2017-8291 CTF with docker and examples
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.