Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
TodosReferência 26.738Exploit-DB 24.490GitHub PoC 18.525inteligência de exploração 11.299Nuclei 4.626Metasploit 3.542✓ só verificadosrecentespopularesrisco
89.220 exploits
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC★ 107
BeichenDream/CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
DanielXavierJob/-CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
Reproduction for Next.js CVE-2025-55182 version string confusion issue
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
Kubernetes Ingress-nginx RCE (IngressNightmare)
CVE-2025-1974CRITICAL10 dez 2025
ingress-nginx admission controller RCE escalation
85RISCO
abrir ↗
GitHub PoC
Apache Tomcat Deserialization RCE
CVE-2025-24813CRITICALsob ataque10 dez 2025
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
remote-with-credentials
CVE-2025-53772HIGH10 dez 2025
Web Deploy Remote Code Execution Vulnerability
46RISCO
initial-access
CVE-2025-1974CRITICAL10 dez 2025
ingress-nginx admission controller RCE escalation
85RISCO
client-side
CVE-2025-24071MEDIUM10 dez 2025
Microsoft Windows File Explorer Spoofing Vulnerability
38RISCO
initial-access
CVE-2025-3248CRITICALsob ataqueransomware10 dez 2025
Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
100RISCO
GitHub PoC
py script proof of concept new CVE-2025-55182 based in lachlan2k script
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
PoC for testing if a target is vulnerable to RCE
CVE-2020-14882CRITICALsob ataque10 dez 2025
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗
GitHub PoC★ 1
Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation, Shodan/Censys mass scan, auto-pwn + reverse shells, Nuclei templates, K8s lab & C2 dashboard. Authored by Sudeepa Wanigarathna – strictly for authorized red team and penetration testing.
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 3
RscScan: Professional cross-platform vulnerability scanner for Next.js Server Actions (CVE-2025-55182). Detects critical RCE flaws with multi-threaded scanning, real-time analytics, and multi-language support. Built with Electron & React.
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
nmap script to scan react2shell (CVE-2025-55182 and CVE-2025-66478) Vulnerability
CVE-2025-55182CRITICALsob ataqueransomware10 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
remote-with-credentials
CVE-2025-33073HIGHsob ataque10 dez 2025
Windows SMB Client Elevation of Privilege Vulnerability
93RISCO
GitHub PoC
ysfcndgr/React2Shell-CVE-2025-55182-Advanced-Scanner
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
* React2Shell-CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 4
CVE-2025-55182-Exploiter Google Chrome Extension. nextjs vulnerability #nextjscve
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
React2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web frameworks using React Server Components (RSC).
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 5
POC for React2Shell (CVE-2025-55182)
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 4
CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself
CVE-2025-67511CRITICAL09 dez 2025
Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool
48RISCO
abrir ↗
GitHub PoC
eytannatye/R2S_CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware09 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
← anteriorpágina 381 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.