Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

81.415exploits catalogados
37.908CVEs com exploração pública
24.695testados em laboratório
81.064 exploits
GitHub PoC
Privilege Escalation on HTB "Poison" using PwnKit (CVE-2021-4034)
CVE-2021-4034HIGHsob ataqueransomware13 jun 2025
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool
100RISCO
abrir ↗
GitHub PoC★ 716
PoC Exploit for the NTLM reflection SMB flaw.
CVE-2025-33073HIGHsob ataque13 jun 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-24071MEDIUM13 jun 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2024-55890MEDIUM13 jun 2025
D-Tale allows Remote Code Execution through the Custom Filter Input
48RISCO
abrir ↗
GitHub PoC
CVE-2017-8291 CTF with docker and examples
CVE-2017-8291HIGHsob ataque13 jun 2025
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISCO
abrir ↗
Exploit-DB
Windows File Explorer Windows 10 Pro x64 - TAR Extraction
CVE-2025-24071MEDIUMremotewindows13 jun 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2017-8291HIGHsob ataque13 jun 2025
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion
100RISCO
abrir ↗
GitHub PoC
CVE-2025-31650
CVE-2025-31650HIGH13 jun 2025
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
53RISCO
abrir ↗
VulnCheck XDB
remote-with-credentials
CVE-2025-33073HIGHsob ataque13 jun 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
abrir ↗
Exploit-DB
Freefloat FTP Server 1.0 - Remote Buffer Overflow
CVE-2025-5548MEDIUMremotemultiple13 jun 2025
FreeFloat FTP Server NOOP Command buffer overflow
38RISCO
abrir ↗
GitHub PoC★ 1
Stored XSS in Nagios Log Server 2024R1.3.1
CVE-2025-29471HIGH13 jun 2025
Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code
41RISCO
abrir ↗
Exploit-DB
Roundcube 1.6.10 - Remote Code Execution (RCE)
CVE-2025-49113CRITICALsob ataquewebappsmultiple13 jun 2025
Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the
100RISCO
abrir ↗
GitHub PoC
CVE-2025-31650
CVE-2025-31650HIGH13 jun 2025
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
53RISCO
abrir ↗
GitHub PoC
amitlttwo/Next.JS-CVE-2025-29927
CVE-2025-29927CRITICAL12 jun 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2025-27817HIGH12 jun 2025
Apache Kafka Client: Arbitrary file read and SSRF vulnerability
68RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2025-29927CRITICAL12 jun 2025
Authorization Bypass in Next.js Middleware
85RISCO
abrir ↗
GitHub PoC
In this lab I walked through an end-to-end intrusion that began with an external RDP break-in, used a brand-new CLFS privilege-escalation exploit (CVE-2024–49138), and ended with SYSTEM-level cloud credential harvesting. Below is the story, the evidence, and the lessons I drew from it.
CVE-2024-49138HIGHsob ataque12 jun 2025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2019-15107CRITICALsob ataqueransomware12 jun 2025
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera
100RISCO
abrir ↗
GitHub PoC
Gigamon Unauth RCE (CVE-2026-36848)
CVE-2026-36848HIGH12 jun 2025
Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.
41RISCO
abrir ↗
GitHub PoC
PoC for CVE-2021-29447
CVE-2021-29447HIGH12 jun 2025
WordPress Authenticated XXE attack when installation is running PHP 8
63RISCO
abrir ↗
VulnCheck XDB
client-side
CVE-2025-33053HIGHsob ataque12 jun 2025
Internet Shortcut Files Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 64
CVE-2025-33053 Proof Of Concept (PoC)
CVE-2025-33053HIGHsob ataque12 jun 2025
Internet Shortcut Files Remote Code Execution Vulnerability
100RISCO
abrir ↗
VulnCheck XDB
infoleak
CVE-2025-5287HIGH12 jun 2025
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
56RISCO
abrir ↗
VulnCheck XDB
initial-access
CVE-2021-41773HIGHsob ataqueransomware11 jun 2025
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC
Exploiting the vulnerability called "Dirty_Sock" (CVE-2019-7304) in the REST API for Canonical's snapd daemon.
CVE-2019-7304HIGH11 jun 2025
Local privilege escalation via snapd socket
53RISCO
abrir ↗
VulnCheck XDB
local
CVE-2025-21333HIGHsob ataque11 jun 2025
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
71RISCO
abrir ↗
Metasploit300
CVE-2025-33053 Exploit via Malicious .URL File and WebDAV
CVE-2025-33053HIGHsob ataque11 jun 2025
Internet Shortcut Files Remote Code Execution Vulnerability
100RISCO
abrir ↗
GitHub PoC
Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell (CVE-2022-22965). Local Docker-based setup.
CVE-2022-22965CRITICALsob ataque11 jun 2025
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗
GitHub PoC★ 2
CyberQuestor-infosec/CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE
CVE-2021-41773HIGHsob ataqueransomware11 jun 2025
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
100RISCO
abrir ↗
GitHub PoC
KimJuhyeong95/cve-2025-24514
CVE-2025-24514HIGH11 jun 2025
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
68RISCO
abrir ↗
← anteriorpágina 320 / 2.703próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.