Exploração pública
Catálogo de exploits
Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.
76.313exploits catalogados
34.834CVEs com exploração pública
24.695testados em laboratório
TodosExploit-DB 24.443Referência 21.797GitHub PoC 13.885VulnCheck XDB 8.484Nuclei 4.237Metasploit 3.467✓ só verificadosrecentespopularesrisco
76.107 exploits
VulnCheck XDB
local
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗GitHub PoC★ 270
POC exploit for CVE-2024-49138
Windows Common Log File System Driver Elevation of Privilege Vulnerability
76RISCO
abrir ↗GitHub PoC★ 1
Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,
100RISCO
abrir ↗GitHub PoC★ 1
Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re
100RISCO
abrir ↗GitHub PoC★ 1
Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗Metasploit600
GestioIP 3.5.7 Remote Command Execution
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacke
75RISCO
abrir ↗GitHub PoC★ 1
CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors.
Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
75RISCO
abrir ↗Metasploit300
Car Rental System 1.0 File Upload RCE (Authenticated)
In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types a
28RISCO
abrir ↗GitHub PoC★ 1
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
WordPress Partners plugin <= 0.2.0 - PHP Object Injection vulnerability
48RISCO
abrir ↗GitHub PoC★ 1
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
63RISCO
abrir ↗GitHub PoC★ 1
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
WordPress VRPConnector plugin <= 2.0.1 - PHP Object Injection vulnerability
48RISCO
abrir ↗GitHub PoC★ 3
CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
91RISCO
abrir ↗VulnCheck XDB
initial-access
Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
75RISCO
abrir ↗VulnCheck XDB
infoleak
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
63RISCO
abrir ↗GitHub PoC★ 4
# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7
100RISCO
abrir ↗VulnCheck XDB
infoleak
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza
100RISCO
abrir ↗GitHub PoC★ 1
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection
63RISCO
abrir ↗VulnCheck XDB
initial-access
Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
48RISCO
abrir ↗VulnCheck XDB
initial-access
Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
63RISCO
abrir ↗GitHub PoC★ 2
kcfg bypass example - CVE-2024-21338
Windows Kernel Elevation of Privilege Vulnerability
83RISCO
abrir ↗Metasploit300
SimpleHelp Path Traversal Vulnerability CVE-2024-57727
SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enabl
100RISCO
abrir ↗GitHub PoC
he Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation (Versions Up to and Including 1.8.4)
Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
63RISCO
abrir ↗GitHub PoC★ 1
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability
48RISCO
abrir ↗GitHub PoC★ 17
CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza
100RISCO
abrir ↗GitHub PoC★ 1
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
63RISCO
abrir ↗GitHub PoC
Nxploited/CVE-2024-10586-Poc
Debug Tool <= 2.2 - Unauthenticated Arbitrary File Creation
48RISCO
abrir ↗GitHub PoC★ 1
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
48RISCO
abrir ↗Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.