Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
81.689exploits catalogados
38.075CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.482Referência 24.381GitHub PoC 15.712VulnCheck XDB 9.162Nuclei 4.445Metasploit 3.507✓ só verificadosrecentespopularesrisco
81.689 exploits
GitHub PoC
Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI
Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
63RISCO
abrir ↗VulnCheck XDB
local
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗VulnCheck XDB
local
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗GitHub PoC★ 12
Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send
48RISCO
abrir ↗GitHub PoC★ 1
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in cop
100RISCO
abrir ↗GitHub PoC
调试环境
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗VulnCheck XDB
local
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RISCO
abrir ↗GitHub PoC★ 15
CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.
NTLM Hash Disclosure Spoofing Vulnerability
85RISCO
abrir ↗GitHub PoC★ 2
Proof of concept for CVE-2023-40028: Ghost arbitrary file read
Arbitrary file read via symlinks in Ghost
45RISCO
abrir ↗GitHub PoC★ 198
Proof of concept & details for CVE-2025-21298
Windows OLE Remote Code Execution Vulnerability
70RISCO
abrir ↗GitHub PoC★ 4
This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them.
Openssh: regresshion - race condition in ssh allows rce/dos
63RISCO
abrir ↗GitHub PoC★ 5
A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RISCO
abrir ↗GitHub PoC★ 5
A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗GitHub PoC★ 5
A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,
100RISCO
abrir ↗GitHub PoC★ 3
This is a Chained RCE in the Havoc C2 framework using github.com/chebuya and github.com/IncludeSecurity pocs
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send
48RISCO
abrir ↗GitHub PoC★ 16
Havoc SSRF to RCE
An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send
48RISCO
abrir ↗GitHub PoC
PoC: Plugin: Zita Site Builder <= 1.0.2 - Arbitrary Plugin Installation
WordPress Zita Site Builder plugin <= 1.0.2 - Arbitrary Plugin Installation and Activation vulnerability
48RISCO
abrir ↗GitHub PoC★ 1
RapidResetClient
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir ↗GitHub PoC★ 1
masa42/CVE-2024-38821-POC
Authorization Bypass of Static Resources in WebFlux Applications
48RISCO
abrir ↗VulnCheck XDB
denial-of-service
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many
93RISCO
abrir ↗GitHub PoC★ 3
Picsmize plugin for WordPress is vulnerable to arbitrary file uploads.
WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability
48RISCO
abrir ↗GitHub PoC
Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce
WordPress Import Export For WooCommerce plugin <= 1.6.2 - Arbitrary File Upload vulnerability
48RISCO
abrir ↗VulnCheck XDB
initial-access
Microsoft Configuration Manager Remote Code Execution Vulnerability
100RISCO
abrir ↗VulnCheck XDB
infoleak
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enabl
100RISCO
abrir ↗GitHub PoC★ 1
c1ph3rbyt3/CVE-2022-24816
Improper Control of Generation of Code in jai-ext
100RISCO
abrir ↗GitHub PoC
c1ph3rbyt3/CVE-2022-29464
Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file
100RISCO
abrir ↗GitHub PoC★ 15
CVE-2024-57727
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enabl
100RISCO
abrir ↗GitHub PoC
This is a repository that aims to provide research material on CVE-2020-14882 as part of a project in partial fullfilment of ACS EDU Program.
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions
100RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.