Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

89.220exploits catalogados
41.197CVEs com exploração pública
24.696testados em laboratório
89.220 exploits
GitHub PoC★ 2
CVE-2025-55182 React RCE Test Program
CVE-2025-55182CRITICALsob ataqueransomware08 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware08 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
TH-SecForge/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware08 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 15
[漏洞复现] 全球首款基于RSC特性能绕过WAF检测的CVE-2025-55182 React Server RCE 漏洞 EXP。
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 1
Security toolkit to detect CVE-2025-55182 (React2Shell) vulnerability
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
Scripts for a lab environment demonstrating the Zerologon (CVE-2020-1472) vulnerability.
CVE-2020-1472MEDIUMsob ataqueransomware07 dez 2025
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir ↗
GitHub PoC★ 9
CVE-2025-55182 – React2Shell: Proof-of-Concept Remote Code Execution (RCE) exploit for Next.js apps. Features an interactive shell prompt to test and demonstrate the vulnerability in real time. Use for security research and authorized penetration-testing only.
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
High-fidelity RCE scanner for CVE-2025-55182 affecting Next.js RSC. Supports mass scanning, command execution, and automated recon pipelines. Built for pentesters, researchers, and bounty hunters.
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2014-6287CRITICALsob ataque07 dez 2025
The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c a
100RISCO
GitHub PoC★ 7
encrypter15/CVE-2025-50165-x64-Exploit
CVE-2025-50165CRITICAL07 dez 2025
Windows Graphics Component Remote Code Execution Vulnerability
53RISCO
abrir ↗
GitHub PoC
ahmedshamsddin/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
CVE-2025-55182-POC
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 3
Dh4v4l8/CVE-2025-55182-poc-tool
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 6
This is CVE-2025-55182 exploit
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2020-1472MEDIUMsob ataqueransomware07 dez 2025
Netlogon Elevation of Privilege Vulnerability
100RISCO
GitHub PoC
jumodada/react-cve-2025-55182-demo
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
Play with react2shell in a safe environment!
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
hunter24x24/CVE-2025-55182-mass
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 34
react2shell CVE-2025-55182 PoC
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC
andressuarezmonk/CVE-2025-55182
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 15
Critical RCE vulnerability scanner for React Server Components (CVE-2025-55182). Automated exploitation framework with multi-payload support, proxy capabilities, and interactive command execution.
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 7
A curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as "React2Shell".
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 24
🔥 React2Shell Toolkit - CVE-2025-55182 & CVE-2025-66478
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC
CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean Markdown report.
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 39
Step-by-step walkthrough of CVE-2025-55182 (React2Shell) by tracing React's Flight protocol internals.
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
GitHub PoC★ 4
Torito React2Shell Scanner & Exploit Tool (CVE-2025-55182 / 66478)
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir ↗
initial-access
CVE-2025-55182CRITICALsob ataqueransomware07 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
GitHub PoC★ 4
Python RCE exploit for Sendmail with ClamAV-Milter <0.91.2 (CVE-2007-4560). Remote root command injection via SMTP RCPT TO headers.
CVE-2007-4560—07 dez 2025
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary command
60RISCO
abrir ↗
GitHub PoC★ 4
Docker API CVE-2025-9074 PoC (Proof-Of-Concept). A sophisticated exploitation framework for CVE-2025-9074, targeting unauthenticated Docker API endpoints with an integrated interactive command shell.
CVE-2025-9074CRITICAL07 dez 2025
Docker Desktop allows unauthenticated access to Docker Engine API from containers
48RISCO
abrir ↗
← anteriorpágina 386 / 2.974próximo →

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e bases de inteligência de exploração. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.