Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
GitHub PoC
S-Mughal/NextJS-app-CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
This repository documents three security vulnerabilities discovered in FreePBX (CVE-2025-66039, CVE-2025-61678, CVE-2025-61675), including analysis, impact, and proof-of-concept details for security research and awareness purposes.
CVE-2025-66039CRITICAL16 dez 2025
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
63RISCO
abrir ↗
GitHub PoC
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability."
CVE-2017-0144HIGHsob ataqueransomware16 dez 2025
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
React2Shell Exploitation Tool (CVE-2025-55182)
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
試してみるよん
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
Exploit-DB
esm-dev 136 - Path Traversal
CVE-2025-59342MEDIUMwebappsmultiple16 dez 2025
esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header
48RISCO
abrir ↗
GitHub PoC
An advanced vulnerability scanner for detecting **CVE-2025-55182** and **CVE-2025-66478** - critical Remote Code Execution (RCE) vulnerabilities in Next.js applications using React Server Components (RSC).
CVE-2025-55182CRITICALsob ataqueransomware16 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
CVE-2022-0492
CVE-2022-0492HIGHsob ataque16 dez 2025
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. Th
86RISCO
abrir ↗
GitHub PoC
This repo contains the scripts you can execute to simulate the (CVE-2025-55182) along with next.js server
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
client-side
CVE-2025-6218HIGHsob ataque15 dez 2025
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
93RISCO
infoleak
CVE-2017-8917—15 dez 2025
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspeci
60RISCO
GitHub PoC
A script for exploiting a vulnerability in PyTorch with subsequent RCE in library versions < 2.6.0
CVE-2025-32434CRITICAL15 dez 2025
PyTorch: `torch.load` with `weights_only=True` leads to remote code execution
48RISCO
abrir ↗
GitHub PoC
nexus956/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
yasa
CVE-2024-43202CRITICAL15 dez 2025
Apache DolphinScheduler: Remote Code Execution Vulnerability
48RISCO
abrir ↗
GitHub PoC
simantchaudhari/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-24893CRITICALsob ataque15 dez 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
GitHub PoC★ 2
This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React Server Components and Next.js.
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
hulh122/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2017-5638CRITICALsob ataqueransomware15 dez 2025
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
GitHub PoC★ 1
ACharaf06/CVE-2017-5638-Attack-and-Defense
CVE-2017-5638CRITICALsob ataqueransomware15 dez 2025
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha
100RISCO
abrir ↗
GitHub PoC
o0wo0o/CVE-2025-24893_Shell
CVE-2025-24893CRITICALsob ataque15 dez 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC★ 1
mivmi/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware15 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
← anteriorpágina 374 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.