Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

75.652exploits catalogados

34.545CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.443Referência 21.581GitHub PoC 13.708VulnCheck XDB 8.225Nuclei 4.228Metasploit 3.467✓ só verificadosrecentes populares risco

75.652 exploits

GitHub PoC

Questo script è un proof of concept (PoC) che dimostra una tecnica di privilege escalation (Elevazione di privilegi) sfruttando una vulnerabilità teorica di sudo (es. CVE-2025-32463). Il PoC forza sudo a caricare una libreria .so manipolata sfruttando la funzionalità -R (chroot) e la configurazione personalizzata di NSS (nsswitch.conf).

CVE-2025-32463CRITICALsob ataque05 ago 2025

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

100RISCO

GitHub PoC

CVE-2025-54574

CVE-2025-54574CRITICAL05 ago 2025

Squid's URN Handling can lead to Buffer Overflow

53RISCO

GitHub PoC

Penetration test targeting CVE-2023-7028

CVE-2023-7028CRITICALsob ataque05 ago 2025

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RISCO

GitHub PoC★ 2

binneko/CVE-2025-50286

CVE-2025-50286HIGH05 ago 2025

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plug

56RISCO

VulnCheck XDB

initial-access

CVE-2023-7028CRITICALsob ataque05 ago 2025

Weak Password Recovery Mechanism for Forgotten Password in GitLab

100RISCO

GitHub PoC

Webmin CVE-2022-0824 增强版漏洞利用工具 - 支持命令执行和反向Shell双模式

CVE-2022-0824HIGH05 ago 2025

Improper Access Control to Remote Code Execution in webmin/webmin

78RISCO

GitHub PoC

Proof-of-Concept exploit for CVE-2025-24893, an unauthenticated Remote Code Execution (RCE) vulnerability in XWiki. Exploits a template injection flaw in the SolrSearch endpoint via Groovy script execution.

CVE-2025-24893CRITICALsob ataque05 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

GitHub PoC

PoC | XWiki Platform 15.10.10 - Remote Code Execution

CVE-2025-24893CRITICALsob ataque05 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

VulnCheck XDB

infoleak

CVE-2014-0160HIGHsob ataque05 ago 2025

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

VulnCheck XDB

local

CVE-2023-22809HIGH05 ago 2025

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

68RISCO

GitHub PoC★ 1

beishanxueyuan/CVE-2025-48384-test

CVE-2025-48384HIGHsob ataque04 ago 2025

Git allows arbitrary code execution through broken config quoting

71RISCO

VulnCheck XDB

initial-access

CVE-2018-7600CRITICALsob ataqueransomware04 ago 2025

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

GitHub PoC★ 17

CVE-2025-24893 is a critical unauthenticated remote code execution vulnerability in XWiki (versions < 15.10.11, 16.4.1, 16.5.0RC1) caused by improper handling of Groovy expressions in the SolrSearch macro.

CVE-2025-24893CRITICALsob ataque04 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

VulnCheck XDB

client-side

CVE-2025-48384HIGHsob ataque04 ago 2025

Git allows arbitrary code execution through broken config quoting

71RISCO

GitHub PoC★ 22

PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.

CVE-2025-24893CRITICALsob ataque04 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

GitHub PoC

CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys

CVE-2020-0688HIGHsob ataqueransomware04 ago 2025

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

GitHub PoC

CVE-2013-3900 WinVerifyTrust Signature

CVE-2013-3900MEDIUMsob ataque04 ago 2025

WinVerifyTrust Signature Validation Vulnerability

75RISCO

GitHub PoC

A simple Log4j PoC written in Go

CVE-2021-44228CRITICALsob ataqueransomware04 ago 2025

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

infoleak

CVE-2021-44228CRITICALsob ataqueransomware04 ago 2025

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

VulnCheck XDB

initial-access

CVE-2025-24893CRITICALsob ataque04 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

VulnCheck XDB

initial-access

CVE-2025-7340CRITICAL04 ago 2025

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

48RISCO

VulnCheck XDB

remote-with-credentials

CVE-2020-0688HIGHsob ataqueransomware04 ago 2025

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

100RISCO

GitHub PoC

For Home Lab and Educational Purpose only not intended for any Harmful intenstions purely for educational purpose

CVE-2018-7600CRITICALsob ataqueransomware04 ago 2025

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbi

100RISCO

VulnCheck XDB

initial-access

CVE-2025-24893CRITICALsob ataque04 ago 2025

Remote code execution as guest via SolrSearchMacros request in xwiki

100RISCO

Metasploit600

Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Template Import

CVE-2026-32985CRITICAL04 ago 2025

Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution

63RISCO

GitHub PoC

Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE

CVE-2025-7340CRITICAL04 ago 2025

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

48RISCO

Metasploit600

WordPress StoryChief Plugin Unauthenticated RCE

CVE-2025-7441CRITICAL04 ago 2025

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

75RISCO

GitHub PoC

CVE-2024-2771 Proof-of-Concept

CVE-2024-2771CRITICAL03 ago 2025

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation

63RISCO

Exploit-DB

Microsoft Virtual Hard Disk (VHDX) 11 - Remote Code Execution (RCE)

CVE-2025-49683HIGHlocalwindows03 ago 2025

Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

41RISCO

GitHub PoC★ 5

Tribell Edge Sandbox Escape - PoCs of Edge's legacy vulnerabilities BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager to exploit cross-boundary XmlDocument sharing and escape Edge’s LPAC sandbox (CVE-2019-0555).

CVE-2019-0555—03 ago 2025

An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape

23RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.