Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

71.180exploits catalogados

31.691CVEs com exploração pública

0testados em laboratório

Todos Exploit-DB 22.469Referência 19.841GitHub PoC 13.140VulnCheck XDB 8.078Nuclei 4.190Metasploit 3.462✓ só verificadosrecentes populares risco

13.116 exploits

GitHub PoC

Cybersecurity lab demonstrating exploitation of CVE-2017-0144 (EternalBlue) using Metasploit against a vulnerable Windows 7 VM, achieving SYSTEM-level access via Meterpreter. Includes full attack chain, post exploitation, and mitigation via MS17-010 patching, tested in an isolated ethical lab environment.

CVE-2017-0144HIGHsob ataqueransomware22 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC

CVE-2019-15107 Webmin RCE (unauthenticated) exploit

CVE-2019-15107CRITICALsob ataqueransomware22 abr 2026

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnera

100RISCO

GitHub PoC★ 2

SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backend SQL queries, potentially leading to unauthorized data access and database compromise.

CVE-2024-46636CRITICAL22 abr 2026

NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection v

48RISCO

GitHub PoC

jpselva/CVE-2023-4863

CVE-2023-4863HIGHsob ataque22 abr 2026

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

93RISCO

GitHub PoC

Multi-Stage Attack Modeling and Detection of Log4Shell for CVE-2021-44228

CVE-2021-44228CRITICALsob ataqueransomware22 abr 2026

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

100RISCO

GitHub PoC★ 2

Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110

CVE-2025-58434CRITICAL22 abr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RISCO

GitHub PoC

Sanitized advisory for CVE-2025-51846 affecting CryptPad WebSocket handling.

CVE-2025-51846HIGH22 abr 2026

CryptPad unbounded WebSocket frame flood

41RISCO

GitHub PoC

ClaraSto/CVE-2024-1086_Ausarbeitung

CVE-2024-1086HIGHsob ataqueransomware21 abr 2026

Use-after-free in Linux kernel's netfilter: nf_tables component

76RISCO

GitHub PoC★ 1

Jorrit-VM/CVE-2026-33017

CVE-2026-33017CRITICALsob ataque20 abr 2026

Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

100RISCO

GitHub PoC★ 77

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2023-46604CRITICALsob ataqueransomware20 abr 2026

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

100RISCO

GitHub PoC

micheaol/distccd_rce_CVE-2004-2687

CVE-2004-2687—20 abr 2026

distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote at

60RISCO

GitHub PoC★ 1

CVE-2025-31161

CVE-2025-31161CRITICALsob ataqueransomware20 abr 2026

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

100RISCO

GitHub PoC

Type Local Privilege Escalation exploit for CVE-2021-3493(Ubuntu Kernel vulnerability) documrnted during TryHackme Lab

CVE-2021-3493HIGHsob ataque20 abr 2026

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting o

98RISCO

GitHub PoC

The forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO).

CVE-2025-58434CRITICAL20 abr 2026

Flowise Cloud and Local Deployments have Unauthenticated Password Reset Token Disclosure that Leads to Account Takeover

75RISCO

GitHub PoC

We hope to reproduce CVE-2021-41773 to deepen our understanding of real-world cybersecurity vulnerabilities so that we can be knowledgeable about exploits in industry and academic work.

CVE-2021-41773HIGHsob ataqueransomware20 abr 2026

Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

100RISCO

GitHub PoC★ 1

wa6n3r/CVE-2024-3400

CVE-2024-3400CRITICALsob ataqueransomware20 abr 2026

PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

100RISCO

GitHub PoC

Professional vulnerability assessment of a multi-VLAN enterprise network (student21.local). Confirmed Stored XSS on WebGoat (HIGH, 16) via OWASP ZAP fuzzer, absent XSS on Magento via server sanitization, and CVE-2017-0144 EternalBlue on Metasploitable 3 (CRITICAL, 25) via Nessus + Wireshark PCAP validation.

CVE-2017-0144HIGHsob ataqueransomware20 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC★ 77

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2016-3088CRITICALsob ataque20 abr 2026

The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitr

100RISCO

GitHub PoC

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in headless Chromium, correlates via network.

CVE-2025-32711CRITICAL20 abr 2026

M365 Copilot Information Disclosure Vulnerability

48RISCO

GitHub PoC

Multi-VLAN virtual network across 10 VMs: GRE tunneling, nftables firewall, Active Directory, BIND9 DNS, Kea DHCP, Docker web services, SMB file sharing. Vulnerability assessment using OWASP ZAP (Stored XSS) and Nessus (CVE-2017-0144 EternalBlue). Validated with Wireshark.

CVE-2017-0144HIGHsob ataqueransomware20 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC

Qualitative TVRA for a multi-VLAN enterprise lab: Stored XSS on WebGoat (HIGH, 16), Stored XSS on Magento (ABSENT, MEDIUM, 8), and CVE-2017-0144 EternalBlue on Metasploitable 3 (CRITICAL, 25). Scored via Likelihood × Impact using CVSS v3.0 and ZAP/Nessus/Wireshark evidence.

CVE-2017-0144HIGHsob ataqueransomware20 abr 2026

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

100RISCO

GitHub PoC★ 79

Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)

CVE-2026-34197HIGHsob ataque20 abr 2026

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeans

100RISCO

GitHub PoC

Exploiting Bluekeep (CVE-2019-0708) on windows 7 using metasploit (Esucational lab)

CVE-2019-0708CRITICALsob ataqueransomware19 abr 2026

A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unau

100RISCO

GitHub PoC

NetVanguard-cmd/CVE-2025-61882

CVE-2025-61882CRITICALsob ataqueransomware19 abr 2026

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio

100RISCO

GitHub PoC

rediscovered tplink nday xp (CVE-2023-33538)

CVE-2023-33538HIGHsob ataque19 abr 2026

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabili

83RISCO

GitHub PoC★ 1

Cyb3rCr0wCC/cve-2017-11176

CVE-2017-11176—19 abr 2026

The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr

23RISCO

GitHub PoC

NetVanguard-cmd/CVE-2025-55315

CVE-2025-55315CRITICAL19 abr 2026

ASP.NET Security Feature Bypass Vulnerability

60RISCO

GitHub PoC

Implements the mitigation for CVE-2025-54505 as described by AMD-SB-7053

CVE-2025-54505LOW18 abr 2026

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floa

28RISCO

GitHub PoC

jithinodattu/CVE-2007-4559-lab

CVE-2007-4559CRITICAL18 abr 2026

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows

53RISCO

GitHub PoC

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

CVE-2025-6389CRITICAL18 abr 2026

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

60RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.