Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.415exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.237GitHub PoC 15.615VulnCheck XDB 9.134Nuclei 4.441Metasploit 3.506✓ só verificadosrecentespopularesrisco
81.064 exploits
GitHub PoC
Privilege Escalation on HTB "Poison" using PwnKit (CVE-2021-4034)
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗GitHub PoC★ 716
PoC Exploit for the NTLM reflection SMB flaw.
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗VulnCheck XDB
initial-access
D-Tale allows Remote Code Execution through the Custom Filter Input
48RISCO
abrir ↗GitHub PoC
CVE-2017-8291 CTF with docker and examples
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISCO
abrir ↗Exploit-DB
Windows File Explorer Windows 10 Pro x64 - TAR Extraction
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
abrir ↗VulnCheck XDB
initial-access
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISCO
abrir ↗VulnCheck XDB
remote-with-credentials
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗Exploit-DB
Freefloat FTP Server 1.0 - Remote Buffer Overflow
FreeFloat FTP Server NOOP Command buffer overflow
38RISCO
abrir ↗GitHub PoC★ 1
Stored XSS in Nagios Log Server 2024R1.3.1
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code
41RISCO
abrir ↗Exploit-DB
Roundcube 1.6.10 - Remote Code Execution (RCE)
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the
100RISCO
abrir ↗GitHub PoC
In this lab I walked through an end-to-end intrusion that began with an external RDP break-in, used a brand-new CLFS privilege-escalation exploit (CVE-2024–49138), and ended with SYSTEM-level cloud credential harvesting. Below is the story, the evidence, and the lessons I drew from it.
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗VulnCheck XDB
initial-access
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗GitHub PoC
Gigamon Unauth RCE (CVE-2026-36848)
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
41RISCO
abrir ↗GitHub PoC
PoC for CVE-2021-29447
WordPress Authenticated XXE attack when installation is running PHP 8
63RISCO
abrir ↗GitHub PoC★ 64
CVE-2025-33053 Proof Of Concept (PoC)
Internet Shortcut Files Remote Code Execution Vulnerability
100RISCO
abrir ↗VulnCheck XDB
infoleak
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
56RISCO
abrir ↗VulnCheck XDB
initial-access
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
Exploiting the vulnerability called "Dirty_Sock" (CVE-2019-7304) in the REST API for Canonical's snapd daemon.
Local privilege escalation via snapd socket
53RISCO
abrir ↗VulnCheck XDB
local
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
71RISCO
abrir ↗Metasploit300
CVE-2025-33053 Exploit via Malicious .URL File and WebDAV
Internet Shortcut Files Remote Code Execution Vulnerability
100RISCO
abrir ↗GitHub PoC
Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell (CVE-2022-22965). Local Docker-based setup.
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗GitHub PoC★ 2
CyberQuestor-infosec/CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗GitHub PoC
KimJuhyeong95/cve-2025-24514
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
68RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.