Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
GitHub PoC★ 2
Phantom Signature Attack: An Analysis of the Critical Vulnerability CVE-2025-29774 in the Bitcoin Protocol, SIGHASH_SINGLE Implementation Flaws, and the Mathematical Framework for Private Key Recovery in Lost Cryptocurrency Wallets Enabling Unrestricted Control over BTC Assets
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
48RISCO
abrir ↗GitHub PoC
shubtheone/CVE-2021-36260-hikvision
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation,
100RISCO
abrir ↗GitHub PoC
A comprehensive Security Operations Centre (SOC) incident response simulation demonstrating threat detection, triage, analysis, and mitigation of the Spring4Shell vulnerability (CVE-2022-22965).
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data b
100RISCO
abrir ↗GitHub PoC★ 1
Implementation of the CVE-2023-22809
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISCO
abrir ↗local
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
initial-access
W3 Total Cache < 2.8.13 - Unauthenticated Command Injection
53RISCO
info-leak
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
46RISCO
GitHub PoC
CVE-2025-64459-hunter
Potential SQL injection via _connector keyword argument in QuerySet and Q objects
53RISCO
abrir ↗local
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen
68RISCO
GitHub PoC
**Log4Shell PoC is a high-fidelity exploitation environment designed to replicate the CVE-2021-44228 vulnerability.** It provides a containerized sandbox to demonstrate JNDI injection, LDAP/RMI referral redirection, and remote code execution (RCE) via the Log4j 2 library.
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC
encikayelwhitehat-glitch/CVE-2024-3094
Xz: malicious code in distributed source
70RISCO
abrir ↗GitHub PoC
Asset-wide detection tool for identifying jsPDF usage related to CVE-2025-68428 Detection only — no exploitation
jsPDF has Local File Inclusion/Path Traversal vulnerability
48RISCO
abrir ↗GitHub PoC
🛡️ Detect vulnerable MongoDB instances with the high-performance MongoBleed scanner for CVE-2025-14847, ensuring network security and data protection.
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir ↗initial-access
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
60RISCO
GitHub PoC
beginner friendly write-up for the TryHackMe easy level module- polkit:CVE-2021-3560
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privile
91RISCO
abrir ↗GitHub PoC
🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir ↗initial-access
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet
60RISCO
GitHub PoC
Remote code execution for React Server Components 19.0.0 - 19.2.0
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗initial-access
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC★ 2
alexcyberx/CVE-2025-14847_Expolit
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir ↗local
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
GitHub PoC
POC for the CVE-2025-32462 and CVE-2025-32463 vulnerabilities
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo
28RISCO
abrir ↗GitHub PoC
0x13-ByteZer0/CVE-2024-21762
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0
100RISCO
abrir ↗GitHub PoC★ 11
A simple PoC demonstrating the vulnerability in the ThrottleStop.sys driver, showcasing arbitrary physical memory read and write capabilities, as well as virtual-to-physical address translation using Superfetch.
Code Execution / Escalation of Privileges in ThrottleStop
41RISCO
abrir ↗info-leak
Zlib compressed protocol header length confusion may allow memory read
100RISCO
GitHub PoC
Unauthenticated file upload for Chamilo 1.11.24 and lower
Chamilo LMS Unauthenticated Big Upload File Remote Code Execution
78RISCO
abrir ↗GitHub PoC★ 100
Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and
76RISCO
abrir ↗Metasploit300
osTicket Arbitrary File Read via PHP Filter Chains in mPDF
osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read
58RISCO
abrir ↗GitHub PoC★ 1
Local Priviledge Escalation for Druva
Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitra
38RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.