Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

72.018exploits catalogados
32.219CVEs com exploração pública
1.932testados em laboratório
72.018 exploits
GitHub PoC
Remake of CVE-2025-14847 MongoDB vulnerability demonstration
CVE-2025-14847HIGHsob ataque30 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
Exploit code for Clinic patient management system v1 unauth rce cpms rce CVE-2022-40471
CVE-2022-40471CRITICAL30 dez 2025
Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via p
68RISCO
abrir
GitHub PoC2
Academic proof-of-concept demonstrating CVE-2025-68645 for authorized security research.
CVE-2025-68645HIGHsob ataque30 dez 2025
A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1
98RISCO
abrir
GitHub PoC
cve-2025-54236 poc
CVE-2025-54236CRITICALsob ataque30 dez 2025
Adobe Commerce | Improper Input Validation (CWE-20)
100RISCO
abrir
GitHub PoC
Udyz/CVE-2025-52691
CVE-2025-52691CRITICALsob ataqueransomware30 dez 2025
Upload Arbitrary Files
100RISCO
abrir
GitHub PoC2
AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433
CVE-2025-32433CRITICALsob ataque29 dez 2025
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
100RISCO
abrir
GitHub PoC
Reproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE)
CVE-2018-15133HIGHsob ataque29 dez 2025
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unseri
100RISCO
abrir
GitHub PoC4
Academic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
Detect exposed MongoDB instances and CVE-2025-14847 "MongoBleed" risks — Zero-Trust Python scanner
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
MongoBleed: CVE-2025-14847 Memory Leak Discovery Tool
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
cv-sai-kamesh/n8n-CVE-2025-68613
CVE-2025-68613CRITICALsob ataque29 dez 2025
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir
GitHub PoC3
CVE-2025-14847 (MongoBleed)
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
Context-Aware Memory Leak Scanner & Exploit for CVE-2025-14847.
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
CVE-2025-14611 CentreStack and Triofox full Poc/Exploit
CVE-2025-14611HIGHsob ataque29 dez 2025
Gladinet CentreStack and TrioFox Hard Coded AES Keys
98RISCO
abrir
GitHub PoC1
aexdyhaxor/CVE-2025-32463
CVE-2025-32463CRITICALsob ataque29 dez 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
GitHub PoC13
Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
GitHub PoC
Rishi-kaul/n8n-CVE-2025-68613
CVE-2025-68613CRITICALsob ataque29 dez 2025
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir
GitHub PoC1
CVE-2025-14847 – MongoDB Unauthenticated Memory‑Leak Exploit
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-55182CRITICALsob ataqueransomware29 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-52691CRITICALsob ataqueransomware29 dez 2025
Upload Arbitrary Files
100RISCO
abrir
GitHub PoC
amirali-ramezani/react2shell-CVE-2025-55182-
CVE-2025-55182CRITICALsob ataqueransomware29 dez 2025
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1
100RISCO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-14611HIGHsob ataque29 dez 2025
Gladinet CentreStack and TrioFox Hard Coded AES Keys
98RISCO
abrir
VulnCheck XDB
info-leak
CVE-2025-14847HIGHsob ataque29 dez 2025
Zlib compressed protocol header length confusion may allow memory read
100RISCO
abrir
VulnCheck XDB
local
CVE-2025-32463CRITICALsob ataque29 dez 2025
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director
100RISCO
abrir
GitHub PoC2
Proof of Concept for CVE-2025-24893 demonstrating unauthenticated remote command execution in XWiki through unsafe server-side template evaluation.
CVE-2025-24893CRITICALsob ataque28 dez 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir
VulnCheck XDB
remote-with-credentials
CVE-2025-68613CRITICALsob ataque28 dez 2025
n8n Vulnerable to Remote Code Execution via Expression Injection
100RISCO
abrir
VulnCheck XDB
initial-access
CVE-2025-24893CRITICALsob ataque28 dez 2025
Remote code execution as guest via SolrSearchMacros request in xwiki
100RISCO
abrir
anteriorpágina 138 / 2.401próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.